Behavioral task
behavioral1
Sample
2935f721127bd35fdf62a6862e6b6fefa89a198021faa94478362377a1078226.elf
Resource
debian12-mipsel-20240221-en
debian-12-mipsel
1 signatures
150 seconds
General
-
Target
587be6851645a5abb9b72261ce156c51.bin
-
Size
46KB
-
MD5
a8d50f5451f049a8e34dff4d935569a4
-
SHA1
69f9390040e4a9fa35d138ab8adc0df6d3bbea7d
-
SHA256
d7a0a10f55ecacf8152e5cd4eceb0b36075d50ce89c3bbdc184bf788412c65fb
-
SHA512
e9dfee6f38c035d2ce9ce05cf503588962dd9427ba8ed52498b029329bb041b33462e80f37bd856b39f3458382f77d27a480fad56afe34a7f5a4c80de3bedd82
-
SSDEEP
768:jXE0vxjHUEgsk+wX9YthdsCAIj6KAukm3gqeUhEKR1yYds+U5bTESFU54Ki81qpC:jLtg3+aYthdsCAAkGgqeMjyokb1Fy4LC
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
74.48.66.83:23
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/2935f721127bd35fdf62a6862e6b6fefa89a198021faa94478362377a1078226.elf family_gafgyt -
Gafgyt family
Files
-
587be6851645a5abb9b72261ce156c51.bin.zip
Password: infected
-
2935f721127bd35fdf62a6862e6b6fefa89a198021faa94478362377a1078226.elf.elf linux mipsel