Behavioral task
behavioral1
Sample
fd830c02492d532df51a67b2ee3a481bc0ff31a7f5809a044389b4db1f2c373c.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
1a4b79c705b2597ae41b0443957d6199.bin
-
Size
44KB
-
MD5
d7b9aa360bde41feb9432cc99f4d8c35
-
SHA1
6ea010c914667afbbdb89077755e4322f0d793bf
-
SHA256
8cd8341b70daeb08e477a25f7e8c7a7206262982eb092a89d43df1e0649924d6
-
SHA512
d12072728a6d03b421335f89399449b488853fc493638346af77b3090d9997dec449d8bca62658298d3a03051edc1872bc727ccdf8354d6f7380fe9e553bc276
-
SSDEEP
768:FTXBZns/s0CoAzfg8JWhD/mmU+4t4zBAVt5XHsR6vK1VUAWx6YrI8h0iD:99josfgeIDpUZyzBsjXMiOWdIy
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
188.245.84.178:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/fd830c02492d532df51a67b2ee3a481bc0ff31a7f5809a044389b4db1f2c373c.elf family_gafgyt -
Gafgyt family
Files
-
1a4b79c705b2597ae41b0443957d6199.bin.zip
Password: infected
-
fd830c02492d532df51a67b2ee3a481bc0ff31a7f5809a044389b4db1f2c373c.elf.elf linux arm