Behavioral task
behavioral1
Sample
03be42f6edfd27ccd5797ed071819b066c0e49743bce1c1170191de3de6b9dde.elf
Resource
debian9-mipsbe-20240418-en
debian-9-mips
2 signatures
150 seconds
General
-
Target
dd684a97f43412babe45578e68f8d789.bin
-
Size
50KB
-
MD5
dfaa0088da88cb6fa288f4742cfa8b99
-
SHA1
e687d2013ed2172819a0fe549649244618ba29a7
-
SHA256
a18f2512a9fc3e7be428fe1b98c61d3c3b5f84914192dcfa134dc52c369234ee
-
SHA512
0f75cd92d3d0f9583f6b0dbd607ce21734f26859b7ed510b599e331c179377f6aab2a1cff94025f6d644e4561e6b1cf5f81004e8d737b8511706b184e7f35d87
-
SSDEEP
1536:T7poO8Ri10sRPdBSZpQCfgdJwYFnsOqms:z8Ri15dcbufFnsOq7
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
176.97.114.45:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/03be42f6edfd27ccd5797ed071819b066c0e49743bce1c1170191de3de6b9dde.elf family_gafgyt -
Gafgyt family
Files
-
dd684a97f43412babe45578e68f8d789.bin.zip
Password: infected
-
03be42f6edfd27ccd5797ed071819b066c0e49743bce1c1170191de3de6b9dde.elf.elf linux mipsbe