Behavioral task
behavioral1
Sample
8488c0e447428e855fa8376ea2b5e17852f6c399a2c92eabcc97823369d27e75.elf
Resource
debian12-mipsel-20240221-en
debian-12-mipsel
3 signatures
150 seconds
General
-
Target
941227e2b497f67925f5796f90257408.bin
-
Size
63KB
-
MD5
01b37dd80020f838a0224491595cf5d2
-
SHA1
9876bf0ab9c145293ebbe7609f4ab6fffbedf84a
-
SHA256
5665538e76a0bea6ecaaa117aacab92890dde870a4eb1a0adcdd485eeb25676b
-
SHA512
a4a3db01f0aa65335336e5aac0188ebfaeb6c567f8a824ff04d7e46996c182c6c41fa8176811368adf1c6c8cc6df4ce04c1eddc449afcd281ef0501e26c7995e
-
SSDEEP
768:rdWehkcq3VsevE6d2oIvYqYYova1Qsr3gOnLdOIqjDKUxCGZmXjouuL8YP1c3iEA:rdWCq38I2oIMXMhOjbijZi8YPgiEWga
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
87.120.112.101:405
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/8488c0e447428e855fa8376ea2b5e17852f6c399a2c92eabcc97823369d27e75.elf family_gafgyt -
Gafgyt family
Files
-
941227e2b497f67925f5796f90257408.bin.zip
Password: infected
-
8488c0e447428e855fa8376ea2b5e17852f6c399a2c92eabcc97823369d27e75.elf.elf linux mipsel