Behavioral task
behavioral1
Sample
8aaf675182cf45012d8be3212cf930b62455ee0cc119960506268b6921bbb522.elf
Resource
debian12-mipsel-20240729-en
debian-12-mipsel
2 signatures
150 seconds
General
-
Target
51b52744e7a0eab5a4d11a308e7a62ea.bin
-
Size
52KB
-
MD5
e8a977a0598fbf2af63e1c3024a905bb
-
SHA1
9061216ba787266724b4951fb8770cfb96be6836
-
SHA256
910ee2c8c42675bead80d9b8d1ee0bdaba6803997d353f71250e8d20a9d1a426
-
SHA512
3b806512721ed2d418f2d82569d268347195427cd21c7178664beffc8246dfd34a574588c8ce1d068f159a8382cc3e854b7e6270a07a2dfce6de8b1514896764
-
SSDEEP
1536:gu5HLysmt4s7061RDVfxIV7+/NWK6sCY/mDHNTe8f:95rypt5Z1mVhcVoz
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.103.102.219:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/8aaf675182cf45012d8be3212cf930b62455ee0cc119960506268b6921bbb522.elf family_gafgyt -
Gafgyt family
Files
-
51b52744e7a0eab5a4d11a308e7a62ea.bin.zip
Password: infected
-
8aaf675182cf45012d8be3212cf930b62455ee0cc119960506268b6921bbb522.elf.elf linux mipsel