Behavioral task
behavioral1
Sample
efe3c8479a896293c9265ed94c62fdeec9dbd0da6d3ed2155bec9243cdb493a4.elf
Resource
debian9-mipsbe-20240729-en
debian-9-mips
2 signatures
150 seconds
General
-
Target
0f2fc84aaca4a36a82e47644ba42eca7.bin
-
Size
42KB
-
MD5
412d7967504cc305e40be1654b863891
-
SHA1
b1e10a0b450af37c0960fbaf8f387dd6b60af963
-
SHA256
5d27f052c6c95db2b9a8c364df7bbb6bd7e08c8e5d723cf9ce5c9e93366ae280
-
SHA512
6f4deb1efa5cd2b0ea7bb591acfa53a4c816502e846f18db03f9b7508ca65225b9b0d3c3dc0bee17c45401838b7feda7172dee79b917a255bd75d07102aa1af6
-
SSDEEP
768:aRItD83VdrC9f/zQC68q8ciOzm4HeRgbLqZ6SFOr+DQ53wiPiKaqF+10X41QGhMC:rtoypLQ+qlVm4Hj/e6QOyDs3PPiKhe08
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
154.213.187.62:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/efe3c8479a896293c9265ed94c62fdeec9dbd0da6d3ed2155bec9243cdb493a4.elf family_gafgyt -
Gafgyt family
Files
-
0f2fc84aaca4a36a82e47644ba42eca7.bin.zip
Password: infected
-
efe3c8479a896293c9265ed94c62fdeec9dbd0da6d3ed2155bec9243cdb493a4.elf.elf linux mipsbe