Behavioral task
behavioral1
Sample
94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c
Resource
debian12-armhf-20240221-en
debian-12-armhf
3 signatures
150 seconds
General
-
Target
JaffaCakes118_744f022594cc46a87af76d8b2068ecfae6ac8053ac8adf74ca014f40c18ad70e
-
Size
75KB
-
MD5
1d5916a88981bbac845aff9bd4b78dda
-
SHA1
cba2f891098251ca8406e0dd27bbe6594c4b6341
-
SHA256
744f022594cc46a87af76d8b2068ecfae6ac8053ac8adf74ca014f40c18ad70e
-
SHA512
3171ad2dbce430b3f17140247dc59a6153ae08d4e650a216ff83b9450046bd5fd0dc5cb6963abfef9cea3ee54af5f71adc3fd547345d25534f8f5727f5634737
-
SSDEEP
1536:PwZTgJnDX4Gc+0hsV3ikg80DL6RilMLjIr+9:PwZTgJnD42csVSt80H6J/j9
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.140.188.40:1194
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c family_gafgyt -
Gafgyt family
Files
-
JaffaCakes118_744f022594cc46a87af76d8b2068ecfae6ac8053ac8adf74ca014f40c18ad70e.zip
-
94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c.elf linux arm