Behavioral task
behavioral1
Sample
8e6827182ab5956a65a9457d97e8d8e513196820f757d8c6bcfcd0ef8ee73933.elf
Resource
debian9-mipsbe-20240611-en
debian-9-mips
2 signatures
150 seconds
General
-
Target
3cf759e34bb84133514e83f3bda2dfab.bin
-
Size
42KB
-
MD5
00ae28bd2673e5b68c07a2a7188c5155
-
SHA1
11b5496ab2f5ca6aeba6d9db81554e549598573f
-
SHA256
bfd31692541787a90dbbc9a97ae2ebb1411abb422a63ac33f12df1b670b0c23e
-
SHA512
ade7e0ff2c1dd4396ea927d851ebc5f7ffc198f5fd277b54e8ccc7419ea6bce67cc1da6364367c65f1873c36273f5d7993fb6a4f805beaddcaee87c1ec4aed74
-
SSDEEP
768:EfqFpy93/meW7s7chMWwjXX/RFOR9aB3y3QzOzS2f8AF0vPRdy1gpzxkBJ9PW/Eu:/wt/mbM5XP2RC3y32sS2EAF+PRdyszka
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
195.201.59.165:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/8e6827182ab5956a65a9457d97e8d8e513196820f757d8c6bcfcd0ef8ee73933.elf family_gafgyt -
Gafgyt family
Files
-
3cf759e34bb84133514e83f3bda2dfab.bin.zip
Password: infected
-
8e6827182ab5956a65a9457d97e8d8e513196820f757d8c6bcfcd0ef8ee73933.elf.elf linux mipsbe