Behavioral task
behavioral1
Sample
8daebf6b1ab5367a0e76c4f85f93b40b26fa26382b4231f187c3e2b241a7d347.elf
Resource
debian9-armhf-20240418-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
a844f98dc6cd73706a8ee8378a2bd9ed.bin
-
Size
66KB
-
MD5
2a172268d5408d2980bc1ed697516636
-
SHA1
348d3347dbd02754b5549ac5c9adc6edabc64383
-
SHA256
f8e83c2d639986700252a4bc92418bb60b69a34ff05adb1caf12f49524e4ef6a
-
SHA512
bb455a58f36dd9327c18b4cc84633511d3e3afb21bffa3bb7d6139c447d0e1ac9acb83a7dfb0a05c99636f07fd7f7a8204c252a4abaf4dfe8d41600e658e0c5d
-
SSDEEP
1536:cJ8WGwenTSYTvDfBhcoFZ4oMNc2n2CPE0PF1zC/iAA:cJ8WOh3ncoF4Nc22CpPFM7A
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
31.172.83.147:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/8daebf6b1ab5367a0e76c4f85f93b40b26fa26382b4231f187c3e2b241a7d347.elf family_gafgyt -
Gafgyt family
Files
-
a844f98dc6cd73706a8ee8378a2bd9ed.bin.zip
Password: infected
-
8daebf6b1ab5367a0e76c4f85f93b40b26fa26382b4231f187c3e2b241a7d347.elf.elf linux arm