Behavioral task
behavioral1
Sample
94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c
Resource
debian9-armhf-20240418-en
debian-9-armhf
3 signatures
150 seconds
General
-
Target
JaffaCakes118_a946ca5994d73150a0988e1af196833c965dff9ef9f35f7e5f13f440592954ed
-
Size
75KB
-
MD5
7dc124b4f196a81530901de203dbd3e6
-
SHA1
d9d702040275a62e1768a00f5b4d6b02484ecf87
-
SHA256
a946ca5994d73150a0988e1af196833c965dff9ef9f35f7e5f13f440592954ed
-
SHA512
b4ad1cce39e80964300012845d3074c942dae942e0f483c8380ead36a5e43ba93dc419559376483c656b1a3f7f7fc07fdcce6492c54ae78edb2cbbae4c51bdd2
-
SSDEEP
1536:WwZTgJnDX4Gc+0hsV3ikg80DL6RilMLjIr+S:WwZTgJnD42csVSt80H6J/jS
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.140.188.40:1194
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c family_gafgyt -
Gafgyt family
Files
-
JaffaCakes118_a946ca5994d73150a0988e1af196833c965dff9ef9f35f7e5f13f440592954ed.zip
-
94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c.elf linux arm