Behavioral task
behavioral1
Sample
895f51d9af7134ed1b29ba7e9b2a2a96df54f0f140fa1533733e8c673f1a42f9.elf
Resource
debian12-armhf-20240221-en
2 signatures
150 seconds
General
-
Target
a1f1f29d081acb7dc39c8368e4c5e57f.bin
-
Size
82KB
-
MD5
bccd53ef1d4b9a5f76b4df9081245c61
-
SHA1
13494b5548c612315d13a5383d7e92583e9c56f6
-
SHA256
b75757ba9cb5de0d2d9ecf5ffbffc5436e49e570d1a0d80ca4a1f8a961392eba
-
SHA512
0cfc1c84926b9d98be0b27c0dd0882eff52f0d88f2c584fcd720dff252d2933b6389c343ab9332f71e61bed0d4727e5e7516fde02f030f47ec96c30ea2f172ec
-
SSDEEP
1536:pQchExBTc0ZWz8CiS6RNWxZZi6T4ilr9VRl08tSaLG5dF45maOv4e7dX7:AqdgCr4NWxZZXT74KG7Fumpv4eB
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.123.85.167:77
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/895f51d9af7134ed1b29ba7e9b2a2a96df54f0f140fa1533733e8c673f1a42f9.elf family_gafgyt -
Gafgyt family
Files
-
a1f1f29d081acb7dc39c8368e4c5e57f.bin.zip
Password: infected
-
895f51d9af7134ed1b29ba7e9b2a2a96df54f0f140fa1533733e8c673f1a42f9.elf.elf linux arm