Behavioral task
behavioral1
Sample
10cd7675388e4351d22a2efcb99a627912d49976570fbe89f6633259c8738f05.elf
Resource
debian12-armhf-20240221-en
0 signatures
150 seconds
General
-
Target
fdf9bf67b122f055250c078ca1ce50fe.bin
-
Size
82KB
-
MD5
b26303fe7fb19a6510cdc8589113e6ba
-
SHA1
220e867e707aa4bd5f83f22530dfced07f8f1a86
-
SHA256
1c81dbcab1f870f63c77e2bbe10f9f20d38b23924125efefc4a8b0dead60633c
-
SHA512
4912e3fc382474953a3fdab24a81cbafb871fff8deeda716332a9b4a7cb39c0d2a3d592587e583c5dc2b01914f6737170c747916ba23275ed03a0db7c0edb9d2
-
SSDEEP
1536:xDaR2dJuecQltDsp+nlXBcuC/Nmt/hWu0RrhEkSNNDJXOxcPvoLGggaJ39X:xD6eRtDbnFBcj6pWuCoNVXOyY7gaJl
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.95.169.138:322
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/10cd7675388e4351d22a2efcb99a627912d49976570fbe89f6633259c8738f05.elf family_gafgyt -
Gafgyt family
Files
-
fdf9bf67b122f055250c078ca1ce50fe.bin.zip
Password: infected
-
10cd7675388e4351d22a2efcb99a627912d49976570fbe89f6633259c8738f05.elf.elf linux arm