Behavioral task
behavioral1
Sample
1be75e423982f2ff813a1d41a075d6c1da2c9d97b0e58afa0913ebb68c792a99.elf
Resource
debian9-mipsbe-20240418-en
debian-9-mips
2 signatures
150 seconds
General
-
Target
c85913cd0c167fb9db8377e4b02c3bc3.bin
-
Size
42KB
-
MD5
08a849d520a2a06e7f67f43ab624347e
-
SHA1
1149ccf6ca88956f6f14abbf009cf09172ce14a5
-
SHA256
7ccbe12f7d2bacce41fffc4792d1f411138e7c6503fc09078387793912d63d8c
-
SHA512
658bc593df989ee36eb510ec3345fb8ce542abe3533ecb0b675f02be7ab9e199469bf6e88b191915ffb2166c469c28dc5cfd310845235b074c0bb6150be6f7bf
-
SSDEEP
768:I0tUGmyyVzingxaqrAzVu7cTJZ2av+cqeFYa+iVk6GiDzUGsP:IUUGUVziwa1uoNPGcfM8k6dvUJP
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
188.245.84.178:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/1be75e423982f2ff813a1d41a075d6c1da2c9d97b0e58afa0913ebb68c792a99.elf family_gafgyt -
Gafgyt family
Files
-
c85913cd0c167fb9db8377e4b02c3bc3.bin.zip
Password: infected
-
1be75e423982f2ff813a1d41a075d6c1da2c9d97b0e58afa0913ebb68c792a99.elf.elf linux mipsbe