Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
53f612716187c43f1531128a19b627f9665c8f601a5e2e7a097e4b295aa245f4.elf
Resource
debian12-armhf-20240221-en
0 signatures
150 seconds
General
-
Target
631c6d4cb63acb075d1ef12da295de53.bin
-
Size
50KB
-
MD5
2118059bcc26e47585929c4071b81577
-
SHA1
a754b058b31a3242238726a7296c36a854087269
-
SHA256
73b8d69c5602381117cd716c941f604556f345f93f346d055e522ef72120193f
-
SHA512
907cd5227ebb304d6b4a50e92c482bf6c813f78352a50f78bb56b4e57b1d9a6ed619a10bb4fb13e30fbeeed4b575ae8a2019c8f20e876dbc379c40e527ac1cac
-
SSDEEP
768:I6O9nZ6o74YowsrfeYu6MTaS1kBiyBjNgeHrP4ylxn1m8khP7OOtVtDXW/UL:v4Z6o743Kw/S1kBiuB/FQhDO+LMUL
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.123.85.119:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/53f612716187c43f1531128a19b627f9665c8f601a5e2e7a097e4b295aa245f4.elf family_gafgyt -
Gafgyt family
Files
-
631c6d4cb63acb075d1ef12da295de53.bin.zip
Password: infected
-
53f612716187c43f1531128a19b627f9665c8f601a5e2e7a097e4b295aa245f4.elf.elf linux arm