Behavioral task
behavioral1
Sample
9915159e9514ead6e7f730883a1ab2d2b03a8412594cad82327cb8035b903db4.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
0 signatures
150 seconds
General
-
Target
f810846bc536085ceee0d5af0599d396.bin
-
Size
44KB
-
MD5
60ecc76e12c91d5a1b75a0306e20dae5
-
SHA1
5ebbec8f97f116df66defe99fffc56ae6a06c778
-
SHA256
1a250dbfeccc60686b7e72342aeca3484be7ff054101ae6565b1f738eed82f70
-
SHA512
956aeb94cbcf4b79a9e1561afe0e5bb1749bf0895ea70098df7b1cff8d1113ecae5c14f8881c42514352a7130c781af89b0d709ec36123733f436be895574a63
-
SSDEEP
768:RtWWnbeS6tKsnEijJzNJho5XWRMmg5207D7fMSuZ7WB1oh0o0LfoZffNS4S0Sfp6:z1EtKrsJzNjoIR3MzMSuZ7yOhL0r6ffF
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
195.201.59.165:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/9915159e9514ead6e7f730883a1ab2d2b03a8412594cad82327cb8035b903db4.elf family_gafgyt -
Gafgyt family
Files
-
f810846bc536085ceee0d5af0599d396.bin.zip
Password: infected
-
9915159e9514ead6e7f730883a1ab2d2b03a8412594cad82327cb8035b903db4.elf.elf linux arm