Behavioral task
behavioral1
Sample
c30958ba3b70e3e12fb2b7a16dbc096137b6662e9da31fd0573500786a65b3a0.elf
Resource
debian12-mipsel-20240729-en
debian-12-mipsel
0 signatures
150 seconds
General
-
Target
d79befc0aca223ee5a2aaa65d32c6243.bin
-
Size
42KB
-
MD5
cdd8bed89bfeeeb973336ea1f3aa9950
-
SHA1
3502a0ad135691a3905678a69dcb335b1545fd80
-
SHA256
5f8db847bfbcbc2bea6ff9e0b58f87a5e6f5c187ee338a2ec116accc6c043461
-
SHA512
d51fabb56f354fd85e7b75f18ad644655499c0fa139c7d62e9c3688ba998cbb81d703502cb5bbeb123a824f67e1eed6cbbfd8f0c150dbe0dc6f367e66f138e78
-
SSDEEP
768:3IzQZYYpp8VOtL5X9Q/LtLfOlrOk6D96clQMhCaW0rQC7Ca+4Abl/wRYrurIXV:LuY78VOHX9Q/LtLfTN6cldo68n4AZ/w6
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
188.245.84.178:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/c30958ba3b70e3e12fb2b7a16dbc096137b6662e9da31fd0573500786a65b3a0.elf family_gafgyt -
Gafgyt family
Files
-
d79befc0aca223ee5a2aaa65d32c6243.bin.zip
Password: infected
-
c30958ba3b70e3e12fb2b7a16dbc096137b6662e9da31fd0573500786a65b3a0.elf.elf linux mipsel