Behavioral task
behavioral1
Sample
31aeb62e67fd28e19805012565e3b78b95974a8f39d5b627ac00737029ed1126.elf
Resource
debian12-armhf-20240418-en
debian-12-armhf
0 signatures
150 seconds
General
-
Target
5a3daf6d91a0fb5561eedddf1611612f.bin
-
Size
44KB
-
MD5
042a7cbb5c0e5b594a3a14f28af2ed09
-
SHA1
d2aabb5d49d9447b9c078d66f72ec4a95e17f4be
-
SHA256
119c5b7fb824f9439c93ab56c5c218136cca1893d71a1b40e12d199d2db3d21a
-
SHA512
c30500279b30f2aa9024de468036bbb256358a058579d8a8a6fd14e49c05195ce60684e64b060b5c071035308e4862be9defd012adbbed639f615c46bc311dba
-
SSDEEP
768:3j62XIzB9yOQ0OvFoomYgVglPDa2xaFI7W7gPAPpC9y6UohsZJDpt+x:3j62QSOQvNodYgmu2gFJcPAPpF6lsX9k
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
154.213.187.62:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/31aeb62e67fd28e19805012565e3b78b95974a8f39d5b627ac00737029ed1126.elf family_gafgyt -
Gafgyt family
Files
-
5a3daf6d91a0fb5561eedddf1611612f.bin.zip
Password: infected
-
31aeb62e67fd28e19805012565e3b78b95974a8f39d5b627ac00737029ed1126.elf.elf linux arm