Behavioral task
behavioral1
Sample
5bf4a1381bd00139beb0a0ee601c7669bfaab920a85b5c41759579e50bb0bf70.elf
Resource
debian9-mipsbe-20240611-en
debian-9-mips
0 signatures
150 seconds
General
-
Target
3d8b5713e9baecf90c4e0a65ef7d2d90.bin
-
Size
100KB
-
MD5
33420c4b2dc1a1f890618de019ec42fe
-
SHA1
da44691bc323aafd9a084254e4a9f4ebdefb8004
-
SHA256
e9aab401dec6e5bde8cde90bde97e1fa95d69a50c03cacf7c758b86081903ac1
-
SHA512
f1db600144e1336fd857bbe7a4641d91b85c794d52a9ebc1f223d21f06d1c01cb07b9fb6c4c586c524e1d71953bc75897b9af84f04d92c1d25cca57d44c03f45
-
SSDEEP
1536:yPguMur6vCFSU9BNQY9cj9791a+JPOJb7cqFkkDN4lKG3oKWtbPv0gbXg:GMuWihFQ0cj9jJPEFkkDN4lKGJW5xg
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
181.214.231.152:96666
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/5bf4a1381bd00139beb0a0ee601c7669bfaab920a85b5c41759579e50bb0bf70.elf family_gafgyt -
Gafgyt family
Files
-
3d8b5713e9baecf90c4e0a65ef7d2d90.bin.zip
Password: infected
-
5bf4a1381bd00139beb0a0ee601c7669bfaab920a85b5c41759579e50bb0bf70.elf.elf linux mipsbe