Behavioral task
behavioral1
Sample
7918f0d73b038e3371290f78a6e5c158ca98cb04c09bb690ee2cd9f288444ac6.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
2 signatures
150 seconds
General
-
Target
af4819df1f1a35686fc06ed91574dd95.bin
-
Size
74KB
-
MD5
bd11266164270e87110bf3480aa22ab4
-
SHA1
262fd5fcd8253cd8c7f17370f0b4465e371440ab
-
SHA256
0e45f94997487f3455df79d251fc47d3a9015d1fa8f21ae67f9e9e0c74041c92
-
SHA512
df2527d0d0b9ec55bb188a280b41325bca6bb02fa0d40b333b1d1ada7f26f1153404cec7b5f005ccbcb7e7ab750f1ed0e03c4f6540d2adf084ac9a4a05c856fd
-
SSDEEP
1536:2fAjAttoSe0zJvML95Ou5PNnAgNXEOaPGvOC2oyNjjsc0QpD2U:2fAjAwsFU95OuP1RuNGmC23Njjsc0CDb
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
91.92.244.230:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/7918f0d73b038e3371290f78a6e5c158ca98cb04c09bb690ee2cd9f288444ac6.elf family_gafgyt -
Gafgyt family
Files
-
af4819df1f1a35686fc06ed91574dd95.bin.zip
Password: infected
-
7918f0d73b038e3371290f78a6e5c158ca98cb04c09bb690ee2cd9f288444ac6.elf.elf linux arm