Behavioral task
behavioral1
Sample
026da818ab981bafcd68d46303bf6a0b8dfbdfacd37fd7c7596385e8e4d5322d.elf
Resource
debian12-armhf-20240221-en
2 signatures
150 seconds
General
-
Target
fe14f152e363645d00eb9f1170f6e546.bin
-
Size
74KB
-
MD5
aeb52f5ac1dc81d715557f7df3898d3d
-
SHA1
c865dd802304954d93d3d9847528388c6db8fadf
-
SHA256
0c4835eed9c9784837e87bd952d8b5d7a4bc56b891c43870dbd87b7bd66aa913
-
SHA512
9820db489831113d765091f7497cae1b7e78171c4ded58fd1d40d9bd3c7e70dd03be80e2ce22e6247fedee54983c49d501d7b7aa7469a0545c0c9a8a5597db7e
-
SSDEEP
1536:ctD5mnLXXtOX1A36CGlHhaiovICk8ywGQsuv1KXDFqurWRtKkxETSjSxed+ECi/W:ctDuXtOi6XPUdkzuw5zq6kxEmXd+/6W
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
91.92.244.230:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/026da818ab981bafcd68d46303bf6a0b8dfbdfacd37fd7c7596385e8e4d5322d.elf family_gafgyt -
Gafgyt family
Files
-
fe14f152e363645d00eb9f1170f6e546.bin.zip
Password: infected
-
026da818ab981bafcd68d46303bf6a0b8dfbdfacd37fd7c7596385e8e4d5322d.elf.elf linux arm