Behavioral task
behavioral1
Sample
felkawtf.armv6l.elf
Resource
debian12-armhf-20240221-en
2 signatures
150 seconds
General
-
Target
felkawtf.armv6l.elf
-
Size
116KB
-
MD5
f33edad75612663c2502da4439f0d589
-
SHA1
02aa208c49e1b90807d7209cd60be856a1064d92
-
SHA256
b27ebe483edb1272b06de1e7d404c37d695224bda9168a8c41b1f3ade35df621
-
SHA512
fab1764e6cfaa881e8fbcaa24588bfa0e0958d4acf5920ea0891bc6d1e8f81f9eecb090ea056fcf7426fbd8737576f5041f5045e3b12ee25628752c3629e5206
-
SSDEEP
3072:2JaDAC5tpml5asLOtDtFdWzQbmgQOWsXGMN:EaDAC5qLOtDczQbmgQOWCGMN
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
15.204.128.30:6140
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
felkawtf.armv6l.elf.elf linux arm