Behavioral task
behavioral1
Sample
b101a75e8db5b23a67d9942e90c2bba636dc331abf8a3eec9f77eaaf2b41eda7.elf
Resource
debian9-armhf-20240729-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
4a4904e2a861a3b1181d48a97a20e0a1.bin
-
Size
66KB
-
MD5
7f9b9337cd519c54398d6e853d0f4e72
-
SHA1
f0afbe35690f59c5fd4f2866f24ce9e819a8d412
-
SHA256
e332a7dd7ed82ee738c961e6435205d576f68596621c282814bf77b0ccaa39fb
-
SHA512
024694f93d19f0bdccf11be6257154a3235e05b66eb1d063eb1afd41042649988cb2d4dd19bb77a7f53cef618f955b9fe03f4e6257ec24419b1d0faba09ec171
-
SSDEEP
1536:vvOdy5v6XB4pg5kuHfa9UA8NMM0bspEgQzAf8PnDKkuyB:vvAcOWeVHfSUA8KvbeKnvGkuyB
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.216.71.152:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/b101a75e8db5b23a67d9942e90c2bba636dc331abf8a3eec9f77eaaf2b41eda7.elf family_gafgyt -
Gafgyt family
Files
-
4a4904e2a861a3b1181d48a97a20e0a1.bin.zip
Password: infected
-
b101a75e8db5b23a67d9942e90c2bba636dc331abf8a3eec9f77eaaf2b41eda7.elf.elf linux arm