Behavioral task
behavioral1
Sample
ddb6cc0c77f8c72bb52f7ff1390dc152327bcf00defbdb1c88a0dd9ed2e9a8d0.elf
Resource
debian9-mipsel-20240729-en
debian-9-mipsel
2 signatures
150 seconds
General
-
Target
10f27b73c98a7e959c9c03f516440d93.bin
-
Size
52KB
-
MD5
d5d3c7cb2036b433cf9cea13366e97a0
-
SHA1
aba10212cd7e95b55a9cd57436a6c39a953b3275
-
SHA256
c8519c7b8f005bc7c49e7da4e13c045c769a0a1ac84b1ba095788531d1536907
-
SHA512
52cec09f3de014b108bc153591e6e632aa0048dd5889b025c981aec1cfeb19c9ba927513203dfbf247c86f5b3b42f5775f1a7a78880d2d7097a79025386bd5c3
-
SSDEEP
1536:dUENZC6xa77UBXzrbUkw3m7nG2zTG7cLgp00pjk0TgV//jZ1MH:dpNZCmWE3bU3WGUGggp/k00B/DMH
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.216.71.152:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/ddb6cc0c77f8c72bb52f7ff1390dc152327bcf00defbdb1c88a0dd9ed2e9a8d0.elf family_gafgyt -
Gafgyt family
Files
-
10f27b73c98a7e959c9c03f516440d93.bin.zip
Password: infected
-
ddb6cc0c77f8c72bb52f7ff1390dc152327bcf00defbdb1c88a0dd9ed2e9a8d0.elf.elf linux mipsel