Behavioral task
behavioral1
Sample
2f530823763542f3b6fd2a9a3a32a44fdab8f266edc7dbbf1551045fdb72c867.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
0 signatures
150 seconds
General
-
Target
52bc63fd650de35bc245573ae44ea364.bin
-
Size
41KB
-
MD5
fb4a1e0b740d1c97a2e170f6fe256ac2
-
SHA1
57a5d8943042145e83f4af4ffbeb994319aaf9c9
-
SHA256
18987e766af12360cd2e00f7851863042acaa51e1794c05a96e2465a6f40a0f7
-
SHA512
3ccbac9cf26e9bd7e95b31348452b60c07dd9578e2191962b7452bd4561aa14ccfd53450adf98387f12c6b8a7d4e9001e3dad26128f36cd7589139294b83e382
-
SSDEEP
768:VX6XvEGIGTkMBhQ9pz0KeZT6s0q17SxyVssiBTMsUceGjuW0ouUku+R4aLAP4/r:VX6X3Iy69Z0pTlu6ikdGjujduKJLZ/r
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.123.85.251:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/2f530823763542f3b6fd2a9a3a32a44fdab8f266edc7dbbf1551045fdb72c867.elf family_gafgyt -
Gafgyt family
Files
-
52bc63fd650de35bc245573ae44ea364.bin.zip
Password: infected
-
2f530823763542f3b6fd2a9a3a32a44fdab8f266edc7dbbf1551045fdb72c867.elf.elf linux arm