Behavioral task
behavioral1
Sample
0ed7c92c832c1a9ac93891b4199a6dd8dc8f73edb60c75759349ff1d362e02b6.elf
Resource
debian9-armhf-20240729-en
debian-9-armhf
3 signatures
150 seconds
General
-
Target
0ed7c92c832c1a9ac93891b4199a6dd8dc8f73edb60c75759349ff1d362e02b6.elf
-
Size
143KB
-
MD5
3d5b895c49817db7dfad1574226dcc31
-
SHA1
a86f02c6ffd51a5ec540a80d51358012ce0d1fde
-
SHA256
0ed7c92c832c1a9ac93891b4199a6dd8dc8f73edb60c75759349ff1d362e02b6
-
SHA512
c1ceffda5d67393f31ebe9d330b2fd6811b20a36b1c8d7bac6a9bb4e338ccd8e3b10a122c08226ef1e6318e899bb1f402f8aad63d9b2bad28672c044b67d4c24
-
SSDEEP
3072:OhRHih54YD1pMwNvaRt4JoI8B4wetJ8add9QzhsaG6xVDxagZ+TtX4TtQ6W8GoQq:QBt4JJ04wetJ8addQvG6VctX4TtQ6Wvq
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.123.85.201:23
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
0ed7c92c832c1a9ac93891b4199a6dd8dc8f73edb60c75759349ff1d362e02b6.elf.elf linux arm