Behavioral task
behavioral1
Sample
bcb82c221915ff2b2174047d1d0d1b6b2ea3a3157a3edb338777fb13be8b781a.elf
Resource
debian9-mipsbe-20240611-en
debian-9-mips
2 signatures
150 seconds
General
-
Target
JaffaCakes118_d26155c7c195b89fb9e86379289595342710365f65fc5a69d56c73bba33e0591
-
Size
42KB
-
MD5
ed912e8119e666ebdcad954226543dfe
-
SHA1
02775fb7ac613971dd217f4cadfe499ae40df706
-
SHA256
d26155c7c195b89fb9e86379289595342710365f65fc5a69d56c73bba33e0591
-
SHA512
66f5e19928260ea95a3f24af4d01557aec1700a7490281c0f9a3b35baf9b1d482980c9fe528a6683f0a71645d5f9cacccd1c0f3088f167b091edc33d730cde78
-
SSDEEP
768:b3Dy+on+cHMGF03/oZ5/Ed2cu3f11LkUt7W4ObVyDQWFu+bCSPA6RkgyKFiB:LW+on+cHL2QZudfC11TLIsQEuhSo6By
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
138.68.174.56:1111
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/bcb82c221915ff2b2174047d1d0d1b6b2ea3a3157a3edb338777fb13be8b781a.elf family_gafgyt -
Gafgyt family
Files
-
JaffaCakes118_d26155c7c195b89fb9e86379289595342710365f65fc5a69d56c73bba33e0591.zip
Password: infected
-
bcb82c221915ff2b2174047d1d0d1b6b2ea3a3157a3edb338777fb13be8b781a.elf.elf linux mipsbe