Behavioral task
behavioral1
Sample
3a3f9b1d7021b0e8d497449ef2d97f81e6196a1350ba85f891e45a83961e89d9.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
3 signatures
150 seconds
General
-
Target
0c260e4c6abf22910bb0cef9b99f8ab1.bin
-
Size
66KB
-
MD5
02b3c9efbf53cdcdabeeb69027476cfe
-
SHA1
b3e1933f4783c9f9ad0d39e0341e37739894b9c3
-
SHA256
d2bdaa1f67a7571b62302fdba30121b014534aebdd1d3a5d46420ab274da12aa
-
SHA512
e43599187d94ab247f1b6bf735d47e0f816f09f157a07e6f0b844c38c9b19f715e98b83242f8ab2a60e33b3efc66517db279077e667a270208e6df7887f89219
-
SSDEEP
1536:rBHGExMF6scZmlyynEF2mfgrmIf07MvmEwLs/uuSe:x/Zmjyfgrlf3vmEluY
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
87.120.112.101:405
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/3a3f9b1d7021b0e8d497449ef2d97f81e6196a1350ba85f891e45a83961e89d9.elf family_gafgyt -
Gafgyt family
Files
-
0c260e4c6abf22910bb0cef9b99f8ab1.bin.zip
Password: infected
-
3a3f9b1d7021b0e8d497449ef2d97f81e6196a1350ba85f891e45a83961e89d9.elf.elf linux arm