Behavioral task
behavioral1
Sample
0075dd99585895c4db740629d1e53d76eee158adeefc4c69089493e26ac6988b.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
2 signatures
150 seconds
General
-
Target
4530f2ac88e07eb93f8fa1572a3befea.bin
-
Size
67KB
-
MD5
34a8f4d74901694684b5468f06dde4f7
-
SHA1
6cf53f7bf590b6ad60934624c565f1ec33b4f5d3
-
SHA256
34179df03a08582a1fd1e6e14a64dc2986a701796e7507a6782ed695ad8f55e4
-
SHA512
85eb570dbc7a2b9588abf8688b5b96d4af5c0a2c69413aa5f8260defaf6e2320c3404ab8bbdf62d5965e636dd250428a52effc5500a8b1de0b1040d255c8b356
-
SSDEEP
1536:NoFvde78EX1TG/Ff9IdpWLw33RU6u+ccgQrE5PWhSF:NWa3TG/FfGdpWgRUdcgbWhQ
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
195.201.59.165:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/0075dd99585895c4db740629d1e53d76eee158adeefc4c69089493e26ac6988b.elf family_gafgyt -
Gafgyt family
Files
-
4530f2ac88e07eb93f8fa1572a3befea.bin.zip
Password: infected
-
0075dd99585895c4db740629d1e53d76eee158adeefc4c69089493e26ac6988b.elf.elf linux arm