Behavioral task
behavioral1
Sample
4406d5cacddbcd365d5ff580b3bfc98f27310a138c57b2b02c6cb64fcd4ff1d8.elf
Resource
debian9-mipsbe-20240611-en
debian-9-mips
1 signatures
150 seconds
General
-
Target
93f0af313c2fb245cfe12cfb51402969.bin
-
Size
48KB
-
MD5
25acef659fc3da8bdebfc4b40d140b4d
-
SHA1
fe058c87352406cf4a99b8c7ec32891a5dddff78
-
SHA256
8cfaa75f99cd74dbe31cc21eb0cec9f8389579e5cc678e42c092aad769dfdbdd
-
SHA512
eb7c514aa1303ed99491f9dc4cf1333e46ff44f56f10d8d8896d1d4aed6b1109db48b08e970c3d0cc85719c38d709313f6758bae4f0a57ffcb2ca2a2630ff2b1
-
SSDEEP
1536:3h9DskBhTcXgmReYDWH8RumFTxmJ4GvHKpa:x9xB9c6uWcUJ4EH
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.123.85.119:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/4406d5cacddbcd365d5ff580b3bfc98f27310a138c57b2b02c6cb64fcd4ff1d8.elf family_gafgyt -
Gafgyt family
Files
-
93f0af313c2fb245cfe12cfb51402969.bin.zip
Password: infected
-
4406d5cacddbcd365d5ff580b3bfc98f27310a138c57b2b02c6cb64fcd4ff1d8.elf.elf linux mipsbe