Behavioral task
behavioral1
Sample
57602d01609d6193f42f36942e37c309d8a331e01c450296f50491c9a8de7b4a.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
57602d01609d6193f42f36942e37c309d8a331e01c450296f50491c9a8de7b4a.elf
-
Size
135KB
-
MD5
61e50ebda8d1ecb196da9cd28e768f12
-
SHA1
6a439043d1d79d6941b612bb2c494763fc1380ba
-
SHA256
57602d01609d6193f42f36942e37c309d8a331e01c450296f50491c9a8de7b4a
-
SHA512
fd880429d24191add20b082e9775b4bf0af8253ca4545bdffa784f197e78c5d8b4d72e5870904f71412f4772dd1d2057515cbd252e0eb726e1c166718fb6be64
-
SSDEEP
3072:6ql/0Y5lBv69HsWF5ewSFplGkMIRIy8ImTQNIQXc7H:aWvcMtXplGkRRIy8ImTQNIGc7H
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
205.185.122.67:23
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
57602d01609d6193f42f36942e37c309d8a331e01c450296f50491c9a8de7b4a.elf.elf linux arm