Behavioral task
behavioral1
Sample
9ff11eae9665a01eb5cee5ea0406287208bcbd7f6cd77a4f8901e58bdc204780
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
JaffaCakes118_1f3417313142623ec2bd3926d4994255a1764f3a31a10f0a3bf0e29eed576dfc
-
Size
41KB
-
MD5
2ff506d97723dbe6b6f47d471028f404
-
SHA1
28af34f1bf60dcf0261d71d5d927f463cacdc21a
-
SHA256
1f3417313142623ec2bd3926d4994255a1764f3a31a10f0a3bf0e29eed576dfc
-
SHA512
c20705ae46585d5ae81e1a3ec5a8c4f6485c2aeff10a2b9cdca65149112823fafc88be1cbb8c028b9b5ad9681706659820dfeaf2611c08dbb85c21130231d373
-
SSDEEP
768:BBLYN1F0nZiT3SfYwvjP9ZJmaBIfVPVGJxduL6jezHJP:XCbQw3SfpnJmauf5VGJscKp
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.140.188.40:1194
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/9ff11eae9665a01eb5cee5ea0406287208bcbd7f6cd77a4f8901e58bdc204780 family_gafgyt -
Gafgyt family
Files
-
JaffaCakes118_1f3417313142623ec2bd3926d4994255a1764f3a31a10f0a3bf0e29eed576dfc.zip
-
9ff11eae9665a01eb5cee5ea0406287208bcbd7f6cd77a4f8901e58bdc204780.elf linux arm