Behavioral task
behavioral1
Sample
0f60859f887446023b8f5d3b19b13ac50392dbb36392592845731a0a644a860e.elf
Resource
debian12-mipsel-20240221-en
debian-12-mipsel
2 signatures
150 seconds
General
-
Target
d111e3a8f38d3693ff456e90374cacfb.bin
-
Size
42KB
-
MD5
0038cd0ee7046bcb4976375427ba372d
-
SHA1
b27d3264b107e844935681590d6d9808dd3456e0
-
SHA256
a67729bd076a71ee5bb057f62dac87fa27b2897d48cbb1e5d4a301b480257dc5
-
SHA512
86fe2d069cb49be7efd89ca87a482fe4918a2d6f1f1c7e142d2fb4f1f5c302944c1e3cec48b15111993e1412e61e6eafefa1a9fff2875386cfbb5f183a2d6b02
-
SSDEEP
768:f6JQ/MwHaLsEd87P7PFRMX/YOszBte9KBi9igixrhyTXlmEgRR9i23E34i6lSLf:imHHaLDwhRG/Bs6+giyDlm5n9Da16lST
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
195.201.59.165:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/0f60859f887446023b8f5d3b19b13ac50392dbb36392592845731a0a644a860e.elf family_gafgyt -
Gafgyt family
Files
-
d111e3a8f38d3693ff456e90374cacfb.bin.zip
Password: infected
-
0f60859f887446023b8f5d3b19b13ac50392dbb36392592845731a0a644a860e.elf.elf linux mipsel