Behavioral task
behavioral1
Sample
4254bafb8d35e32e0b3c6538af6dc09a1983413fecb9041288ffb2f27d022642.elf
Resource
debian9-mipsbe-20240611-en
debian-9-mips
3 signatures
150 seconds
General
-
Target
43143b2833784b413a38996b25772c6a.bin
-
Size
63KB
-
MD5
5a879aca1893c705b1a069c8e4990ae2
-
SHA1
7bcac515dd73ec35252856880ef779587858188c
-
SHA256
bddc2108173a0c738ea4b887eea485bca65281de2883b92f97150034f2e55b7e
-
SHA512
2219d1433d1047dfeffc70f93d4a101d7cd9bbaba71304533c2391fb970df08239afbd0af72f4ff2d2b1eb5125fee9c5b83f708f2990785bb43405349a0447b7
-
SSDEEP
1536:e1/lhdAUV4mmBpBJbBeXDidL8sGd1uHKtcM6noYUmc9t/E2a3:e1/lLzV2BhYXDurqwkcMPYU7/xa3
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
87.120.112.101:405
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/4254bafb8d35e32e0b3c6538af6dc09a1983413fecb9041288ffb2f27d022642.elf family_gafgyt -
Gafgyt family
Files
-
43143b2833784b413a38996b25772c6a.bin.zip
Password: infected
-
4254bafb8d35e32e0b3c6538af6dc09a1983413fecb9041288ffb2f27d022642.elf.elf linux mipsbe