Behavioral task
behavioral1
Sample
19aad2165f6496cf8601179286586774a2d863a2807ef44c467f08c58ebc5f52.elf
Resource
debian12-armhf-20240221-en
1 signatures
150 seconds
General
-
Target
9fc4b5cf9f6438a64cc1682142b33241.bin
-
Size
57KB
-
MD5
68a36473066c4aa8f1cd8329204095db
-
SHA1
6a03ecf2360dbcdfe0bc2ac933e782959bdbf288
-
SHA256
a02a99d96f770a262df08afbcdd90ef837b69593b4f497f3e1b90c055dd3ee4a
-
SHA512
7d34f5349714020523b006996e9f80fce2b1a2a830e58a0423228d118ac76c42d63ea895e489f4f9f841ebf80f891352617096fa3fefedd421f7c6e115083c04
-
SSDEEP
1536:G5WEUUn7lqQwkTD1a8NzCwSgiFtIo08TihX3GhniZ9S7xw:Gn7lqQwkTD1aJwAFtIo08TihnO7xw
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.123.85.119:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/19aad2165f6496cf8601179286586774a2d863a2807ef44c467f08c58ebc5f52.elf family_gafgyt -
Gafgyt family
Files
-
9fc4b5cf9f6438a64cc1682142b33241.bin.zip
Password: infected
-
19aad2165f6496cf8601179286586774a2d863a2807ef44c467f08c58ebc5f52.elf.elf linux arm