Behavioral task
behavioral1
Sample
98e7a67e16f8ce69c4f3601e484e3325491a4a2fa56bebe321621850e8774a24.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
2 signatures
150 seconds
General
-
Target
02edcf81f90fa0073933ff444cf9c551.bin
-
Size
51KB
-
MD5
784ae0338e41aded7ef85fb63b7ead35
-
SHA1
fb367968fe33e351cd4bc5f874b7b3392d26ccb5
-
SHA256
e4c2b731c29075faf191aac3bb3036c18be652c1a6c28015c9ee03fbc09d59bd
-
SHA512
b57ce6ad485cb0afd53b026e019f0b0fbd48429328a5a568d00cdfcb30fe9e74b4004a31c7a0841061481b9c7a73c1d97b3af1ab4b04f998ad6c0dbeabf456a7
-
SSDEEP
768:kYE584I2/FMfKnkV+5lupIb4n9jDaOLEYUTXqKTxtBWGnsRs5RVRVQKaT2EGD:DCxowlupIS9j2OIZXqKdTNz53EKo2E8
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.123.85.251:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/98e7a67e16f8ce69c4f3601e484e3325491a4a2fa56bebe321621850e8774a24.elf family_gafgyt -
Gafgyt family
Files
-
02edcf81f90fa0073933ff444cf9c551.bin.zip
Password: infected
-
98e7a67e16f8ce69c4f3601e484e3325491a4a2fa56bebe321621850e8774a24.elf.elf linux arm