Behavioral task
behavioral1
Sample
391d29d03801cb94ee932b2cb5c00250925b7e6edadbd9c26b2bc4afcf47132d.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
0 signatures
150 seconds
General
-
Target
acd51cef824ff9ac06b21c6ebccdc6d2.bin
-
Size
40KB
-
MD5
7e3493f2a64a4bd6858386d03d201c2b
-
SHA1
c7f415f7f69430a17ed156770424b5dccb21b3f6
-
SHA256
67fd2a1194fff5ade584ec1aea77b4742a9e3779cf9507e218f23cab1322f4ab
-
SHA512
7701fb36acf2e980d8c2e327655aac363eaf309fe74e064d51b439bf57afdba2feeef896248af959cfc0b69db3dd056aae161e5786fb0e74083f43f29a80f022
-
SSDEEP
768:NxrTZDbqwY0iJMvdiTxKdNud1pJ9A8932TvFgNPNlwjfqsWBTUyB4:NZTtqwY0iJMF69pJ990TvGN8jfLWlUyO
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
31.172.83.147:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/391d29d03801cb94ee932b2cb5c00250925b7e6edadbd9c26b2bc4afcf47132d.elf family_gafgyt -
Gafgyt family
Files
-
acd51cef824ff9ac06b21c6ebccdc6d2.bin.zip
Password: infected
-
391d29d03801cb94ee932b2cb5c00250925b7e6edadbd9c26b2bc4afcf47132d.elf.elf linux arm