Behavioral task
behavioral1
Sample
35c8622596f89014d9e44b634610c2f6940406aa45918a873e808f94af4e4913.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
19aeb425aa11510ba4d8f6bde0c2bebe.bin
-
Size
67KB
-
MD5
f9b60f993e07d6120bf3d773ca0d7883
-
SHA1
e13588e5d1dcca223d3421690ded52a137c0c47a
-
SHA256
f571dc78752a8b80439af750c1349b67ab80ea00920addcc3789b957263828f3
-
SHA512
4312297d269dd48709494f23289bd2d229d4de7ffe0caba1b0d2d13a44531cb5306870030c7c8d42a6bbc10278235b38eb710b48df723d01927ab4a66fb66893
-
SSDEEP
1536:rVWI1Sxg7nIy0D45CT2FXZKN4B1RhJBUY7is8K:r8ISg7IzYq2K2BhJBZ7B8K
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
188.245.84.178:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/35c8622596f89014d9e44b634610c2f6940406aa45918a873e808f94af4e4913.elf family_gafgyt -
Gafgyt family
Files
-
19aeb425aa11510ba4d8f6bde0c2bebe.bin.zip
Password: infected
-
35c8622596f89014d9e44b634610c2f6940406aa45918a873e808f94af4e4913.elf.elf linux arm