Behavioral task
behavioral1
Sample
f7548b648a490e1b26b44caebda3de87e7f36abf52ecc935e0fbf69aa6a3d3ff.elf
Resource
debian12-mipsel-20240221-en
debian-12-mipsel
2 signatures
150 seconds
General
-
Target
1a7871fd3be3629f82a6d853a664a1fe.bin
-
Size
42KB
-
MD5
7df635470f661fdf6b56a8c667a2e9ca
-
SHA1
e559b29e030a9e941c6c2ea38348880b22e073df
-
SHA256
7841c5ea5bc3db18e616c51020db28651486687f505cf267a2547ce2bf497389
-
SHA512
7a4768d47a85f42569665c9ceaa1a694b2c7624993399ce08bd2cc3e20979e0e43f3e8c011e1d83abd5d5eb08b21ba175c082d95c34c9e304e71587b314a204c
-
SSDEEP
768:pKzofsx6MDHVMtpvUrktkd2INQep7z+44wcOA6nxkDAJQFJ4yKO55vhkiA:pKyMTVMIkolf4wcv6nxkAQb4yKO55vhq
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
154.213.187.62:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/f7548b648a490e1b26b44caebda3de87e7f36abf52ecc935e0fbf69aa6a3d3ff.elf family_gafgyt -
Gafgyt family
Files
-
1a7871fd3be3629f82a6d853a664a1fe.bin.zip
Password: infected
-
f7548b648a490e1b26b44caebda3de87e7f36abf52ecc935e0fbf69aa6a3d3ff.elf.elf linux mipsel