Behavioral task
behavioral1
Sample
9ec0ea99005073df644fbc422866b76955c6fa478906745f67475459b38c421e.elf
Resource
debian12-armhf-20240729-en
2 signatures
150 seconds
General
-
Target
9ec0ea99005073df644fbc422866b76955c6fa478906745f67475459b38c421e.zip
-
Size
66KB
-
MD5
679c73ae703bf974e1cee0cde8462532
-
SHA1
1915e8987f2903e6b64a25a7cb7767a41b400264
-
SHA256
5d665a70d871063042d84ef8bf8bb1099aeff2784ec8dbb00bcfb4388ffe6887
-
SHA512
e31b7c2f087ce4de30b376766929451a126b29275f40527dfe1be810d52aa221f50f76ee5de5aff6f4a5b29d4ad11c1b709efe79f103b7c66a29c305cad5ff56
-
SSDEEP
1536:Fd4NsGF9BNZdJT/nvVQwM/fVjNctf2vlew:H4f/ZfvVFmfVhctBw
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
173.208.190.227:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/9ec0ea99005073df644fbc422866b76955c6fa478906745f67475459b38c421e.elf family_gafgyt -
Gafgyt family
Files
-
9ec0ea99005073df644fbc422866b76955c6fa478906745f67475459b38c421e.zip.zip
Password: infected
-
9ec0ea99005073df644fbc422866b76955c6fa478906745f67475459b38c421e.elf.elf linux arm