Behavioral task
behavioral1
Sample
f2bf73313bc9c18e7964296b83a2d75c3c234fed6f4de1d21acde29dc4d5ac91.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
0 signatures
150 seconds
General
-
Target
ce9bddeed014a2efd1a9e5563319d658.bin
-
Size
47KB
-
MD5
be2de0999a8da82bde5dfe983212683b
-
SHA1
b6d2c2a3de97fe48dd88c3c798a159f968a52818
-
SHA256
c3ea286380c708b45650fb6eec273ff37666ef0ada932466e9dd010bcd92b1bb
-
SHA512
3f6c69268b6c551f2a2b6301044d5f9bff1204c180087d1d53bb0dff1013f314941ed508682c1a5e0ce0948a565a6977e490cae8840c753f563fce51ea758ca7
-
SSDEEP
768:dsR9VpnqY7oq+lww8Lvcsq5FeKzFWCr/fIM1vF/QxL7KvZvJJR+alS+:dO9VpJji4cd4SbWxLO/R3
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.123.85.119:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/f2bf73313bc9c18e7964296b83a2d75c3c234fed6f4de1d21acde29dc4d5ac91.elf family_gafgyt -
Gafgyt family
Files
-
ce9bddeed014a2efd1a9e5563319d658.bin.zip
Password: infected
-
f2bf73313bc9c18e7964296b83a2d75c3c234fed6f4de1d21acde29dc4d5ac91.elf.elf linux arm