Behavioral task
behavioral1
Sample
671815667c509e522ec6c14b1a3f2b153713aab5773c1dbfca1ca6146c36cf1e.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
2 signatures
150 seconds
General
-
Target
455ed43db7f7ca0f92f7981472a38063.bin
-
Size
51KB
-
MD5
11aace125be5f4e9c4147d5fdd9c7f01
-
SHA1
4d7b47d39450cac869891ef5da9a5ec34e4362d0
-
SHA256
77b6f1d4ca79d5a0c8c69daf7cb222d25563c529779185f38b5692f758effed7
-
SHA512
ce88223c026f5c7354bbf531c391b65bedc89642121f04cb2142842282d885fe753bc07386029ac19dffe5134f148b906483b074e37d38bfcd92ff9cfba9eb37
-
SSDEEP
1536:kDNk4GAhs/AwXJ9I5jz5Bac/AOZlfKg1/s38lPY04QtrPJ0:kDij5/AII5HawlZlfKgFssiQtB0
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
188.245.84.178:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/671815667c509e522ec6c14b1a3f2b153713aab5773c1dbfca1ca6146c36cf1e.elf family_gafgyt -
Gafgyt family
Files
-
455ed43db7f7ca0f92f7981472a38063.bin.zip
Password: infected
-
671815667c509e522ec6c14b1a3f2b153713aab5773c1dbfca1ca6146c36cf1e.elf.elf linux arm