Behavioral task
behavioral1
Sample
88c459917f3bb33ae58116bb24567e046c733882d9fede66c8374cad122e4254.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
0 signatures
150 seconds
General
-
Target
eef7d6a2539372a8d18f30b97ef3b3be.bin
-
Size
41KB
-
MD5
bb11fa1e120fc007e17278def9e7e14b
-
SHA1
f5ef091e46a5dbf5b656fc5e6fd0cf1cc0077172
-
SHA256
08754b58c7b8bbe2a980590f7f76ceb38516ac5f92934f779589240d860fb093
-
SHA512
788060a67132538d5f83136b4834b991139977ab8ba2aee47316759a03d5800aad80c463f8f8754d98eface3ed0688a65c2faab197676f553d32d13b28a6964f
-
SSDEEP
768:02lm3CPVyWwuu74MwI5MavaVQumWiAU3jBCv/6UVeKRzOXNAV/EQhm:HA3eRbuQMZvaVXm5AUz4eQzOqCQM
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
188.245.84.178:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/88c459917f3bb33ae58116bb24567e046c733882d9fede66c8374cad122e4254.elf family_gafgyt -
Gafgyt family
Files
-
eef7d6a2539372a8d18f30b97ef3b3be.bin.zip
Password: infected
-
88c459917f3bb33ae58116bb24567e046c733882d9fede66c8374cad122e4254.elf.elf linux arm