Behavioral task
behavioral1
Sample
96967c1b1aec4bb2e45047e0fab0d3d793a502630a112a6dd7e1ad6d4ceabe5f.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
0b9c50ac49e202f06421ab0bb325468e.bin
-
Size
49KB
-
MD5
5fbf5eaa7cf970fbc17808fad3e3fdc5
-
SHA1
ef840a934753d583023fe4925cda70a0811c58d2
-
SHA256
8a284897e6dcd3106c3d3b72003483c5744635ad2073736159928e59c317102c
-
SHA512
64659d06292ed177ee4c91157c075b332167ebc4d87d36c742cc330ea51b4c7562e411b1684ea804670331c1e9aeebb2ecfae345699fa2348c6ff879ba38f136
-
SSDEEP
768:vnfvETxtZmuL5tai+e4NJgLsHJjiktx0IgJxwlX8MNJb7OBLWTvnwbw42qaCEiTY:vnwtZmuLfacorFuTwlsMMLI0V2VVv
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.216.71.152:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/96967c1b1aec4bb2e45047e0fab0d3d793a502630a112a6dd7e1ad6d4ceabe5f.elf family_gafgyt -
Gafgyt family
Files
-
0b9c50ac49e202f06421ab0bb325468e.bin.zip
Password: infected
-
96967c1b1aec4bb2e45047e0fab0d3d793a502630a112a6dd7e1ad6d4ceabe5f.elf.elf linux arm