Behavioral task
behavioral1
Sample
bcb82c221915ff2b2174047d1d0d1b6b2ea3a3157a3edb338777fb13be8b781a.elf
Resource
debian9-mipsbe-20240611-en
debian-9-mips
2 signatures
150 seconds
General
-
Target
JaffaCakes118_dfbfa9e645482fd5f76636f20e79d14c4f8e9bf15a7b50f07fc26de7ede8e989
-
Size
42KB
-
MD5
8d8707806aaaf4b70c0586c3b53f46fb
-
SHA1
982f274f571ec82b0d427c77fe8ec36ef10333ce
-
SHA256
dfbfa9e645482fd5f76636f20e79d14c4f8e9bf15a7b50f07fc26de7ede8e989
-
SHA512
92042d4fe18347275b168a7f58032bd3248173e903ec4c158a201e9ff0853340e46220581f31f7c8d807ca0c9ce4af1a8fd552b8dec9717c152db5940955ec30
-
SSDEEP
768:A7xS9n9/9wS+aWwCGgbbruajBVIZg9aTDadqDLkXrBczsHmRXKv9LC1gWApzBkjY:Qx6FXjCGgvDKZlDadqDCBc7RavZQepz7
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
138.68.174.56:1111
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/bcb82c221915ff2b2174047d1d0d1b6b2ea3a3157a3edb338777fb13be8b781a.elf family_gafgyt -
Gafgyt family
Files
-
JaffaCakes118_dfbfa9e645482fd5f76636f20e79d14c4f8e9bf15a7b50f07fc26de7ede8e989.zip
Password: infected
-
bcb82c221915ff2b2174047d1d0d1b6b2ea3a3157a3edb338777fb13be8b781a.elf.elf linux mipsbe