Behavioral task
behavioral1
Sample
671815667c509e522ec6c14b1a3f2b153713aab5773c1dbfca1ca6146c36cf1e.elf
Resource
debian12-armhf-20240729-en
debian-12-armhf
2 signatures
150 seconds
General
-
Target
671815667c509e522ec6c14b1a3f2b153713aab5773c1dbfca1ca6146c36cf1e.elf
-
Size
118KB
-
MD5
455ed43db7f7ca0f92f7981472a38063
-
SHA1
79efa71b9f878471da11f4d787329405a0291109
-
SHA256
671815667c509e522ec6c14b1a3f2b153713aab5773c1dbfca1ca6146c36cf1e
-
SHA512
7536562189c005cb658d3c60dfdd87eb74f3629031ecfe31e0a6c9837ec52ed28a573a6bb4c70ba45013251113f214a48cf94fc08f2bdd23f95b82466d7481a9
-
SSDEEP
3072:ekYPUfsgnsb0J2ag/Vf1kDuuN4g+mTQOY5NX3cn:9YPUfsgEo2a01kDuxg+mTQOY5R3cn
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
188.245.84.178:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
671815667c509e522ec6c14b1a3f2b153713aab5773c1dbfca1ca6146c36cf1e.elf.elf linux arm