Behavioral task
behavioral1
Sample
94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c
Resource
debian9-armhf-20240729-en
debian-9-armhf
3 signatures
150 seconds
General
-
Target
JaffaCakes118_2d0c430ad6e5b988fddc1d79e11172e999d0200661539720650f812a2a4e7d8a
-
Size
75KB
-
MD5
3d135163834b91474ce31bed2d229ba0
-
SHA1
1edfd9e4139ccf241bff6901826893c5af486ff9
-
SHA256
2d0c430ad6e5b988fddc1d79e11172e999d0200661539720650f812a2a4e7d8a
-
SHA512
34aae932238b974aae0d296bd21185e61118017346045ce811ad1840429decefb13e26e4ed1b45246cfe75163437dff2b63039aa2f8142bed44137dbfc2a19e2
-
SSDEEP
1536:+wZTgJnDX4Gc+0hsV3ikg80DL6RilMLjIr+a:+wZTgJnD42csVSt80H6J/ja
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.140.188.40:1194
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c family_gafgyt -
Gafgyt family
Files
-
JaffaCakes118_2d0c430ad6e5b988fddc1d79e11172e999d0200661539720650f812a2a4e7d8a.zip
-
94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c.elf linux arm