Behavioral task
behavioral1
Sample
bb2c38c4b910c412c7e05bdce1f18077fd9f468d817004cdd2ced85f88062c3a.elf
Resource
ubuntu1804-amd64-20221111-en
ubuntu-18.04-amd64
1 signatures
150 seconds
General
-
Target
ae49daae0e372fd9f94e67e41cdd0b33.bin
-
Size
50KB
-
MD5
e6e7954642687ddc96b398e3a87ea41a
-
SHA1
c708e07d9389359e21eddc312bdf4342cff5c2b6
-
SHA256
7582c66060fdcc3df172f8771ccde032f76d0ec33d7265249c4eee7d5f01e6db
-
SHA512
12949dcb26686a10ef91ec4ef503012cc7f9efa136c28bb8a0c41c44e3346061aeff1ab07cd9107ce4e688b12c739c0eae6a3868ce25eba63c0a7209aa921f50
-
SSDEEP
768:m+HvkHRVZlHNFDNFTbbY5LfZz4qRExfwaG3Zhc75wXirREJJQIZddp52XnAorOvI:gRDNuKqTZCVw2EDQIZdH52XdvxD
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
161.35.25.184:9034
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/bb2c38c4b910c412c7e05bdce1f18077fd9f468d817004cdd2ced85f88062c3a.elf family_gafgyt -
Gafgyt family
Files
-
ae49daae0e372fd9f94e67e41cdd0b33.bin.zip
Password: infected
-
bb2c38c4b910c412c7e05bdce1f18077fd9f468d817004cdd2ced85f88062c3a.elf.elf linux x64