Behavioral task
behavioral1
Sample
6c278ed61ef0fd3f56d5fc36f578887e4762c4282e952d60b6ad90eec5b1f889.elf
Resource
debian9-armhf-20240418-en
0 signatures
150 seconds
General
-
Target
b2e75d068838bae7e427b19048177717.bin
-
Size
66KB
-
MD5
cc537bbd58e34a4506d374adcad08fb3
-
SHA1
831d826307167dafb5ce694a84ed230b00ce013c
-
SHA256
2dfbf7e6b81385b2c0622fe91b382a24b6b37c4a6f32382c8b0a41f147b73ea6
-
SHA512
eb0f6a56861d3ca60154b2b1f230985ab24df21036c040ab960fac2f07cd1f3a9f176acf4a0fb8b99025d6d2a719856aa2d4ae209459e5a6f444a3c1fc5c4b63
-
SSDEEP
1536:gzNDiSj5KpJDbp5EfbpN8CNnHdA+933I7ibyxIvGI17ITC:qNOSj+vvEzpNhHW64M/
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
158.160.8.110:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/6c278ed61ef0fd3f56d5fc36f578887e4762c4282e952d60b6ad90eec5b1f889.elf family_gafgyt -
Gafgyt family
Files
-
b2e75d068838bae7e427b19048177717.bin.zip
Password: infected
-
6c278ed61ef0fd3f56d5fc36f578887e4762c4282e952d60b6ad90eec5b1f889.elf.elf linux arm