Behavioral task
behavioral1
Sample
449eb3e2c3026c3db9df0adf43407668619aff3f61a496519792c1b1cc6f78fb.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
0 signatures
150 seconds
General
-
Target
37657efa7c2f9964102e257f05ecd276.bin
-
Size
44KB
-
MD5
868a15889cf60eb9f0a1a6d183e28858
-
SHA1
3688331acf30677bb06c66d018b5b44ef7a762b9
-
SHA256
6b6e0705782db3e37101de99462308b567401d3ad12c0e6dd937f98ec0ab19a5
-
SHA512
8395cc9cef2224cb4e6d35681610ce7aee2e9fe17da84f424ffa571239999d16da13227a51e7e39b7a25a41c23bb36e5746b2f42ce70ce9036b125729ce9ce34
-
SSDEEP
768:8n1ibDJp1dqohH/Ir/PXgvTWbIMDaVpUHyP67bfZBx875sDex9dqFCDlGHrTnWXh:MslPdq02gqQVp6xNBS7Wy9gY5Ya
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
74.48.66.83:23
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/449eb3e2c3026c3db9df0adf43407668619aff3f61a496519792c1b1cc6f78fb.elf family_gafgyt -
Gafgyt family
Files
-
37657efa7c2f9964102e257f05ecd276.bin.zip
Password: infected
-
449eb3e2c3026c3db9df0adf43407668619aff3f61a496519792c1b1cc6f78fb.elf.elf linux arm