Behavioral task
behavioral1
Sample
7780ae12ab7aa44d2010b16b4cc944b9cc5df5dcd945f7edb12c992af76cfbe3.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
2 signatures
150 seconds
General
-
Target
b2beab580053cd4b42058f5e043e5211.bin
-
Size
66KB
-
MD5
83d22875de0737b9baac5887d86b51ca
-
SHA1
2170c0546d08cade7c6616a1b35164d3f2572957
-
SHA256
179485fec1fcf815cc71976e8a2ce6a1e0a06381716dd6301942e288eb6b23f5
-
SHA512
6f7b2776d2e82f35bcee2d6cd420e4a357fc1856c662ad17dee278573761d0d84842348c3f2b2406cc13ca88bf87b9d4efeebbb57be98c7688fb0d0dce224386
-
SSDEEP
1536:zPZfg1sE8rJM2QZ3VY/gjs8L7N0Bmg7gQSLyoC7nInBLdRr:9oI6lpdCBmg7gQSLyopBLdh
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.216.71.152:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/7780ae12ab7aa44d2010b16b4cc944b9cc5df5dcd945f7edb12c992af76cfbe3.elf family_gafgyt -
Gafgyt family
Files
-
b2beab580053cd4b42058f5e043e5211.bin.zip
Password: infected
-
7780ae12ab7aa44d2010b16b4cc944b9cc5df5dcd945f7edb12c992af76cfbe3.elf.elf linux arm