Behavioral task
behavioral1
Sample
dba49ff661329bd885a914df625ab3e7b5fb324f2a0468db07c646cdead9f41a.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
dba49ff661329bd885a914df625ab3e7b5fb324f2a0468db07c646cdead9f41a.elf
-
Size
150KB
-
MD5
63931a17500f6e546e3bf71b14ddd381
-
SHA1
f6b187b0d228cb7ce49e8e8e04170e2a14378e52
-
SHA256
dba49ff661329bd885a914df625ab3e7b5fb324f2a0468db07c646cdead9f41a
-
SHA512
f73c62ac143a2c15412b11aad25588d2d03e5e37e547ef9649805d8acdf3348ffee2ad7dee1fcbacf3779ec0a538eb5df1b7070ded64b5aba40449c695bfd279
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAT5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDT65hWTGHIM/9ldmpwTsLS
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
37.156.29.141:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
dba49ff661329bd885a914df625ab3e7b5fb324f2a0468db07c646cdead9f41a.elf.elf linux arm