Behavioral task
behavioral1
Sample
94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c
Resource
debian12-armhf-20240221-en
debian-12-armhf
3 signatures
150 seconds
General
-
Target
JaffaCakes118_7eb2979bdc53bbecfe23f0da0876b4effea08e207ad60a100d901270caf48e0f
-
Size
75KB
-
MD5
e37f4bfc60a4ba29c652d5a6f40031ed
-
SHA1
1782520a3983c56708aca79b3eab364af468b7cb
-
SHA256
7eb2979bdc53bbecfe23f0da0876b4effea08e207ad60a100d901270caf48e0f
-
SHA512
d3ada7c75d78a2b6584578ba3d6c6efc79f5dafb6dc23927bcfc7d14e40d555f0e134d79ae6ce421eff749173a9a74b895f60ec3eb0528680e948543d4ad2336
-
SSDEEP
1536:UwZTgJnDX4Gc+0hsV3ikg80DL6RilMLjIr+8:UwZTgJnD42csVSt80H6J/j8
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.140.188.40:1194
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c family_gafgyt -
Gafgyt family
Files
-
JaffaCakes118_7eb2979bdc53bbecfe23f0da0876b4effea08e207ad60a100d901270caf48e0f.zip
-
94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c.elf linux arm