Behavioral task
behavioral1
Sample
2e0e412ea94023982e4ef1041ee6f141a67c1530930bc3b2f99786635f10996a
Resource
debian9-armhf-20240611-en
debian-9-armhf
3 signatures
150 seconds
General
-
Target
JaffaCakes118_4b7a908b3c960eefb80eea3b2e749cefc3f2365468111a016a4d8383981567a9
-
Size
92KB
-
MD5
eb74fd5f75e411d3851de1a26dbcf50e
-
SHA1
c451159060f874211a79a1748dabfc7044f86e31
-
SHA256
4b7a908b3c960eefb80eea3b2e749cefc3f2365468111a016a4d8383981567a9
-
SHA512
3adf9cd896635ff4365e86e3c0507b0c05d1c16e1f2127dec709a40bf208a6252ce1e1be1a3aab1f4ecb2172c9360cb47f9e2e325ddddaf9ae0ccccb5195429c
-
SSDEEP
1536:jdRlM9L+n1M2KY9n5qTqt1Dx+BJqLBPMH2Uf7B9QeBx4vhJMNog:PloL+17KYA/EBEH2UzBOO4Jq+g
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.140.188.40:1194
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/2e0e412ea94023982e4ef1041ee6f141a67c1530930bc3b2f99786635f10996a family_gafgyt -
Gafgyt family
Files
-
JaffaCakes118_4b7a908b3c960eefb80eea3b2e749cefc3f2365468111a016a4d8383981567a9.zip
-
2e0e412ea94023982e4ef1041ee6f141a67c1530930bc3b2f99786635f10996a.elf linux arm