Behavioral task
behavioral1
Sample
28e0cc4dc79dbbbe4461097fe84f0995821e21b33d9db649c7f6b6fde48fb0cd.elf
Resource
debian9-armhf-20240226-en
0 signatures
150 seconds
General
-
Target
dda07af28e70973dffc40a6d55ee21b0.bin
-
Size
66KB
-
MD5
096657a68e87d6ae9c888d082803d4a7
-
SHA1
3b17b22ec923387590026eb87a3a9f131f0e4340
-
SHA256
58680cdfb901c6f6b2ad2f2b84f7f43c37ecd8652ec9e8b553310aa48ba5f9f2
-
SHA512
2388e3641403d5ca13ba633cb46021580ec995ecd27d58e7d3e9f8bb1336c7c4672f22b259506bd9d107f102f4439c3c42cd54fedd1cf9ae04740681310c1c48
-
SSDEEP
1536:GMpzSHQkgE5OwzmHmRORk+S9YY7vhlSSvAjLvDFwbqv9k:G6GQzERlR9YCvnS4AX7Fti
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
95.174.91.180:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/28e0cc4dc79dbbbe4461097fe84f0995821e21b33d9db649c7f6b6fde48fb0cd.elf family_gafgyt -
Gafgyt family
Files
-
dda07af28e70973dffc40a6d55ee21b0.bin.zip
Password: infected
-
28e0cc4dc79dbbbe4461097fe84f0995821e21b33d9db649c7f6b6fde48fb0cd.elf.elf linux arm