Behavioral task
behavioral1
Sample
a9ce0201536afb380206d2ef843eaa025490a268179a115451b344adc594bae2.elf
Resource
debian9-armhf-20240611-en
0 signatures
150 seconds
General
-
Target
d279feffb132253bbe7f05d3c43d4cd2.bin
-
Size
82KB
-
MD5
e125fa0516b278091c65e24a65aeba74
-
SHA1
98935252b2232f95aeedc65051d818ac54d9269a
-
SHA256
834b1900d0db85e3b33b7c2760fc48d26a834a0629d8c82499ed3d563408b10b
-
SHA512
b15f7bb5cd0b432e724a68098b8205287ce6483aaa5003d966d94cc3c559f6a234a6a17f8437655f72699e184f7c01c30ddf6d423e919dfd4a4ae7fd9b421e5c
-
SSDEEP
1536:MrHjf3tIMX9C2Xjm0Z5DndF0c+2gQdQE5WSDFlYPOHhv4ruN0M/G:sj/tzo2Xjm25ZF+2gYQEQSDUuhSqY
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.95.169.138:322
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/a9ce0201536afb380206d2ef843eaa025490a268179a115451b344adc594bae2.elf family_gafgyt -
Gafgyt family
Files
-
d279feffb132253bbe7f05d3c43d4cd2.bin.zip
Password: infected
-
a9ce0201536afb380206d2ef843eaa025490a268179a115451b344adc594bae2.elf.elf linux arm