Behavioral task
behavioral1
Sample
6ac57203130207f6d1b33fd710356dbe5dd56fee6ddebe607a8dc3ee152bccfb.elf
Resource
debian9-mipsel-20240611-en
debian-9-mipsel
2 signatures
150 seconds
General
-
Target
397bcfb06013b5359f9e344b30f9a961.bin
-
Size
42KB
-
MD5
e6a6473ef2b1f9c3150bb3201a72dbf3
-
SHA1
92094396e383bc4d002b3993ba29c04832942c35
-
SHA256
13a45053227644c91949165e2129a5be6e0872e4dc0355dd2c46dfa9e3fbe9cc
-
SHA512
3041ebb256f09419b4c391d4e9a6de230a905fbeec91d65f3e90ad42b00683dbb3372a3fbc9bc2cdd1379be3c5ecbf91e653e94a9b8e785c7d8ca2b2fda46ace
-
SSDEEP
768:R0elWfWuhDftTqUdJ7stzkpRzNkuLaWH6oBSRI04QYFCK9wVyou4aUa:R0Z+uhpqIrVdaLlGh9Mu4pa
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.123.85.251:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/6ac57203130207f6d1b33fd710356dbe5dd56fee6ddebe607a8dc3ee152bccfb.elf family_gafgyt -
Gafgyt family
Files
-
397bcfb06013b5359f9e344b30f9a961.bin.zip
Password: infected
-
6ac57203130207f6d1b33fd710356dbe5dd56fee6ddebe607a8dc3ee152bccfb.elf.elf linux mipsel