Behavioral task
behavioral1
Sample
a89e13562d26a569447d231492f82707463ccaa00b09a54668889ac35b61f1d8.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
2 signatures
150 seconds
General
-
Target
f4e4ec698146a29e6a4dea6caee872a7.bin
-
Size
67KB
-
MD5
77a4078b286c1c3c3e673a6ce18285f9
-
SHA1
23e7ba46bc73681a881daba07c627f264dcaf729
-
SHA256
0d0226771c3e82d68831e6924f133ae9b4ee225d3bd1c60366405bb8e4069516
-
SHA512
959786b5ae9632f79e7bc3ecb1ba5d70496e7e90606fe986653aa325bbc38b2e44d7ba063cef2315c9ea41dc145003c344ec44d25b3cf5346d61752de541bb11
-
SSDEEP
1536:C+LQUwo2BWoNUU+EEEocaq02LGFU1f3ps4QsbSeN4s1jglfHzz:Cto2T+EJocaq026FGf3pVQsbSyGHzz
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
154.213.187.62:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/a89e13562d26a569447d231492f82707463ccaa00b09a54668889ac35b61f1d8.elf family_gafgyt -
Gafgyt family
Files
-
f4e4ec698146a29e6a4dea6caee872a7.bin.zip
Password: infected
-
a89e13562d26a569447d231492f82707463ccaa00b09a54668889ac35b61f1d8.elf.elf linux arm