Behavioral task
behavioral1
Sample
b668eeb8fcbb3906e1732dd10362f9c70d63a4769afeb340140f7b24e9f3550b.elf
Resource
debian9-armhf-20240729-en
2 signatures
150 seconds
General
-
Target
16bd1d62e09167923ca88fd2700f3424.bin
-
Size
44KB
-
MD5
a705a83eff82e74da3a892c1c60c068d
-
SHA1
604064aa45d9c115ad6362252b9159d55ff284d5
-
SHA256
0bbf529f09fc2bb4e730dcf5bfc0fef1589169de95874081f8df2302a9e0a8d7
-
SHA512
ad2856389086aef133f2622ffb8d23afc479cd0275aca4c4398b83c990d7c803bc16f658d52765479d77c92f6261cc25195c206062f86be162490272d226d134
-
SSDEEP
768:IgT5r9ZW42hnZ60cbVHhM3XNdPALqA+EF7sKlZ+ARSoRkHuPjm6ftilJnUGAG4Sz:f19Z0ZWhMze2EFY+vRSoXPCjlJUGAEz
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
87.120.114.132:606
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/b668eeb8fcbb3906e1732dd10362f9c70d63a4769afeb340140f7b24e9f3550b.elf family_gafgyt -
Gafgyt family
Files
-
16bd1d62e09167923ca88fd2700f3424.bin.zip
Password: infected
-
b668eeb8fcbb3906e1732dd10362f9c70d63a4769afeb340140f7b24e9f3550b.elf.elf linux arm