Behavioral task
behavioral1
Sample
ffa0249743191159a70f726de115d95b232d1a2519bdc937b90eda765b949502.elf
Resource
debian12-armhf-20240418-en
0 signatures
150 seconds
General
-
Target
fd15afab6ccd143350e5d64cdde861d4.bin
-
Size
64KB
-
MD5
0ad7e5bf74b542bf1cab67ac7b9eb6a5
-
SHA1
8f6171c2e76c4294730c6548c300840532a08c82
-
SHA256
f43551df963f4e3480c377318a27f6c101984507e9f2a036a3beb11f8c67f901
-
SHA512
5ea98ef18aa738094b310945734880b9ec8b1754211e7aea9a62327ded4c54973dac1db3fb78da5b66b6f1884d991445930007a73282457fdc065c2de74aa5e0
-
SSDEEP
1536:HNXCF1bC0ygVs//x6wKqDuR4Tcl805dV1w8sHzjT/TWs:HFCogO/Z6/rUbe1bsnOs
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
5.253.246.39:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/ffa0249743191159a70f726de115d95b232d1a2519bdc937b90eda765b949502.elf family_gafgyt -
Gafgyt family
Files
-
fd15afab6ccd143350e5d64cdde861d4.bin.zip
Password: infected
-
ffa0249743191159a70f726de115d95b232d1a2519bdc937b90eda765b949502.elf.elf linux arm