Behavioral task
behavioral1
Sample
8e69ce695626d5f073a6a331bba9368637b5c24a90a81b005df71f40ba195124.elf
Resource
debian9-mipsel-20240418-en
debian-9-mipsel
2 signatures
150 seconds
General
-
Target
056b036b2464df14f060f1973dd0e353.bin
-
Size
52KB
-
MD5
e10d4658ff37732f31538c2d5dc723cf
-
SHA1
5d1437883ea151eb74f560d5e45d34358ca660fd
-
SHA256
21c5ad5bb808892518c6ec0782efe85b06dfd9e84f8347337a43cf227faaf529
-
SHA512
7727bf713b135de0b5b8be54f589cbf9797564988f20034da68b085c6d5e587c3ca9e69b41464beffd4e758b01d50fb6dd131ddce7885da7f7c7fbb00bda48b8
-
SSDEEP
1536:SlhU9ecEw4PQmtrARgPi3ePFQSYvlbfRquy:SWJEwHiPFqvFRquy
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
178.215.238.69:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/8e69ce695626d5f073a6a331bba9368637b5c24a90a81b005df71f40ba195124.elf family_gafgyt -
Gafgyt family
Files
-
056b036b2464df14f060f1973dd0e353.bin.zip
Password: infected
-
8e69ce695626d5f073a6a331bba9368637b5c24a90a81b005df71f40ba195124.elf.elf linux mipsel