Behavioral task
behavioral1
Sample
b4b37a109a2773e15f18aa7930242a386e219e156cc06cfffefb5b2d08bd5649.elf
Resource
debian12-mipsel-20240221-en
debian-12-mipsel
2 signatures
150 seconds
General
-
Target
b546c86f1e454f263b50eb54f2181b19.bin
-
Size
42KB
-
MD5
9df6ca0f0a1a525a8dcfd097a63575cd
-
SHA1
dc6160357cf0bd60ef77dfa909411be2340c2e59
-
SHA256
1aac74b25fb07a880f68a3adfb4a240ca2f38cfe98ce09e5c7ce5daf8d14cd01
-
SHA512
f49f929c0f09dccb547987043a84c917a4c25a919df0244f6bf3ded407d477b4e1d966cd0c287e449888608797f44b6b0f3144689116ed18a13114264f8e8618
-
SSDEEP
768:7UMrenmrki/fi8346Ju1x8D/ALFJfS+vZMoyUsm7/2WPCdp:7gsB/683466pFBt+oPsm7pIp
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
31.172.83.147:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/b4b37a109a2773e15f18aa7930242a386e219e156cc06cfffefb5b2d08bd5649.elf family_gafgyt -
Gafgyt family
Files
-
b546c86f1e454f263b50eb54f2181b19.bin.zip
Password: infected
-
b4b37a109a2773e15f18aa7930242a386e219e156cc06cfffefb5b2d08bd5649.elf.elf linux mipsel