Behavioral task
behavioral1
Sample
9666669021bcfce08af6c8b7b1a716c11cb104182c6f73403cda878610cee6f5.elf
Resource
debian12-armhf-20240418-en
debian-12-armhf
0 signatures
150 seconds
General
-
Target
c1a74beb8e8765cc3dc65f8493e97aff.bin
-
Size
52KB
-
MD5
0598a663d742db733fb877376656bf65
-
SHA1
d5727e69560154ae125a9f87120c62adeaa27fed
-
SHA256
f55a4187bd2629d4d0669791ddd2c6f074be082ec135b72c46944da9f94b2d2d
-
SHA512
fd3e805f79dd3235cfa4aeea2f0c2e7ff633556364005bb9a449c06570b50878264e703674e973f24a8d5d8ee7d0aa29e24e45ac233be94d803d1d73a9a9b630
-
SSDEEP
768:n9n7Gs29Rag4HpSQjhi+hzb4jeSsJdFuj+jUVJY0FPUEys9rIjkdNV:n9nZNjhi0Q4da+jUVJtBysVIA3V
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
103.153.69.151:839
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/9666669021bcfce08af6c8b7b1a716c11cb104182c6f73403cda878610cee6f5.elf family_gafgyt -
Gafgyt family
Files
-
c1a74beb8e8765cc3dc65f8493e97aff.bin.zip
Password: infected
-
9666669021bcfce08af6c8b7b1a716c11cb104182c6f73403cda878610cee6f5.elf.elf linux arm