Behavioral task
behavioral1
Sample
7471a1dae77f38eab97aa3dae30547a55bd9981c2f492d72ff9b4611c0ad90ff.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
0 signatures
150 seconds
General
-
Target
cb388dabc7c0f263425b687029f4037e.bin
-
Size
41KB
-
MD5
a89bb0e04f4cf304681e02ec59d86eae
-
SHA1
9f09e8c296945d4d3eaf5ed1096f97eecf62736c
-
SHA256
bd6deef0778494caca20d6b28e75b39a7effab4b79cc16a81db6ad98cfbee825
-
SHA512
ac5182758e2a913d43b6967b7afa036b3c6c93c31af533150044cfc5d2ce1c61cddf3df005a32af1213981a9fa23fc2b43365fbeed2b01f3be27ea45332f270b
-
SSDEEP
768:cRim+6xAdJpdn97pgwneii+Iy74cpHX0FcLfEeNao9mCwhewiVdf9C3+:cRC6Wf3n9VtHim74cpka1NaRE9W+
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
195.201.59.165:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/7471a1dae77f38eab97aa3dae30547a55bd9981c2f492d72ff9b4611c0ad90ff.elf family_gafgyt -
Gafgyt family
Files
-
cb388dabc7c0f263425b687029f4037e.bin.zip
Password: infected
-
7471a1dae77f38eab97aa3dae30547a55bd9981c2f492d72ff9b4611c0ad90ff.elf.elf linux arm