Behavioral task
behavioral1
Sample
a3c242b6037414042b7e675022f93cc3d3fdcb7034d169b199458fa097dc1d58.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
8dba4950f3120e3de39c66b59d36bc55.bin
-
Size
41KB
-
MD5
ed4b4533a2f592db46cc6d1b5fbeda80
-
SHA1
20077347e8efcdf925360ff6cc351973bf64018f
-
SHA256
6eec7ef70bb59707800863f48d4e5f6f7c6845db171a86ea4f7df7002e25df06
-
SHA512
6dfb2effce6ec15ca8234829b4ead9d70045c234a3dce3010e50b78fe92668921b403f04a48a9c80fa45dfc371e5758fccc8cee27b7cf7432a9d3cbe2e16843a
-
SSDEEP
768:AioxET308SqltoQbFrndovq4+NL+dSV64xVrHlJmpgr0arWA04e3JXU734Cfn82P:gxipHtoQJWn+NL+dSw4jjfT6IqJkjNtP
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
154.213.187.62:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/a3c242b6037414042b7e675022f93cc3d3fdcb7034d169b199458fa097dc1d58.elf family_gafgyt -
Gafgyt family
Files
-
8dba4950f3120e3de39c66b59d36bc55.bin.zip
Password: infected
-
a3c242b6037414042b7e675022f93cc3d3fdcb7034d169b199458fa097dc1d58.elf.elf linux arm