Behavioral task
behavioral1
Sample
3acbdb023c0a065196c4bb3009edf0b995b3a89b13f10992f6a105d5a03b531a.elf
Resource
debian9-armhf-20240418-en
debian-9-armhf
0 signatures
150 seconds
General
-
Target
bab8f136daffaaecfe8c18dfc84f4973.bin
-
Size
56KB
-
MD5
1fd55914ba503c507a7ca0bc47089bc1
-
SHA1
fb9f4af898940d2109fe6bf58bdad94eb455df44
-
SHA256
f3c9492c60e4c11029c40cf4d1c5baa675f147a61d676b276077f28745205d6b
-
SHA512
39fa7c5a26f8c976b4e490b44e694b9ccf25566bb3fcb2fdc724abc8d49519dc0b5d2d9487691b62a23d0adaea574c7b4801e26e2d2c601222e9577cf739e9c7
-
SSDEEP
768:/Ir5fxzJ/eQuauXol9fBJh72TZcy4Edz7C1zuQCb2az9y8O6bpXaWFuKpQAl2Ch+:Ar5fxz1vu+9fLh7w4Evc1mTs8nbYpKRm
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
103.153.69.151:42516
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/3acbdb023c0a065196c4bb3009edf0b995b3a89b13f10992f6a105d5a03b531a.elf family_gafgyt -
Gafgyt family
Files
-
bab8f136daffaaecfe8c18dfc84f4973.bin.zip
Password: infected
-
3acbdb023c0a065196c4bb3009edf0b995b3a89b13f10992f6a105d5a03b531a.elf.elf linux arm