Behavioral task
behavioral1
Sample
528a6ae2ead17905754a0724a1ebe9d03277dbe0ecb6faecc7967ef47f3d43ae.elf
Resource
ubuntu1804-amd64-en-20211208
0 signatures
150 seconds
General
-
Target
fb108a4ee4db64b54afbce3d35a9cae5.bin
-
Size
47KB
-
MD5
c27255eb80ecc6cf09d2d4e77a67af74
-
SHA1
855aa775e7e3d2e6508d3eb481f0f2dd54a51918
-
SHA256
d9f980b3c885fb980f6f14bd3ab4dc20608b32cb0b71116441dcb597cc201be1
-
SHA512
4768bc069f36e9b91bc1e5907b7913310e961c7349f96d062b72b0642ea42ded7fa97e2243ffe8f832ceddae1f353ad454025d761eac82ae67a9aed7caf99769
-
SSDEEP
768:QhEj3ZXrMiSd6jQHCEYTBRuZML3tBGoeSyY8j80T9pklEETKpFR/wPJLj:SEbZXrxSI4CEYdRYSXGZS6j805pkmZ7A
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
139.59.156.65:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/528a6ae2ead17905754a0724a1ebe9d03277dbe0ecb6faecc7967ef47f3d43ae.elf family_gafgyt -
Gafgyt family
Files
-
fb108a4ee4db64b54afbce3d35a9cae5.bin.zip
Password: infected
-
528a6ae2ead17905754a0724a1ebe9d03277dbe0ecb6faecc7967ef47f3d43ae.elf.elf linux x64