Behavioral task
behavioral1
Sample
94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c
Resource
debian9-armhf-20240611-en
debian-9-armhf
3 signatures
150 seconds
General
-
Target
JaffaCakes118_3340bab36b4348412ca503ee0c1b0e4c65cf69ae5703ee8080fd6c88701205d6
-
Size
75KB
-
MD5
b44c2038daf11df2aafe6368f081103c
-
SHA1
c11a865b558d8f3e9e21e0e5b798d583404c9a5c
-
SHA256
3340bab36b4348412ca503ee0c1b0e4c65cf69ae5703ee8080fd6c88701205d6
-
SHA512
116423f2725c0cf8bb5341fdc58de8bdd0a40627e21f3864ed091d2a2156fb15fd39a080caa4624f5d60cfad6fbe0116dce3a01a2265a198814ef2f295d6bcbc
-
SSDEEP
1536:8wZTgJnDX4Gc+0hsV3ikg80DL6RilMLjIr+k:8wZTgJnD42csVSt80H6J/jk
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.140.188.40:1194
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c family_gafgyt -
Gafgyt family
Files
-
JaffaCakes118_3340bab36b4348412ca503ee0c1b0e4c65cf69ae5703ee8080fd6c88701205d6.zip
-
94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c.elf linux arm