Behavioral task
behavioral1
Sample
d7d91306ff19624b291be31cb42c238cfc5383b8517760f4e5670e4afbdddd86.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
d7d91306ff19624b291be31cb42c238cfc5383b8517760f4e5670e4afbdddd86.elf
-
Size
156KB
-
MD5
7aa62ab75ba19e44fa6e1db786629ed0
-
SHA1
abf6678f1e87fcc789538a33728d468dc372cb7d
-
SHA256
d7d91306ff19624b291be31cb42c238cfc5383b8517760f4e5670e4afbdddd86
-
SHA512
a0c589bb67f5ef10ed5881fdba4806900a74651405b83d0ab4e0a592c172db0946e5bc46e50873ac63bce39d789b9a7ac3bf46937e8fbeaff5bc0df2590a1002
-
SSDEEP
3072:T1g2/eINNlzx2kkQCMOaQcvBpYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/7YnydM/9MmFwfBxE
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
31.172.87.139:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
d7d91306ff19624b291be31cb42c238cfc5383b8517760f4e5670e4afbdddd86.elf.elf linux arm