Behavioral task
behavioral1
Sample
f8f2b2f71133b706578b94371b9d2b2551b8baf285da9bdfb942cde4870fa3b7.elf
Resource
ubuntu1804-amd64-en-20211208
2 signatures
150 seconds
General
-
Target
27e579d00103d253065684ca94dbb470.bin
-
Size
42KB
-
MD5
11e82550d68b1eccbf1bcb13566855e2
-
SHA1
3bc719671831b589f2cc6da9cb38bd564df1d22e
-
SHA256
de970e56ebe707d4ab8b35bc6e73e5aa7b25b66e16cf0c24770f52bed8685831
-
SHA512
a2dd17a20c033a472e0d558e94fd6525ee907ba1c155855f4be2c60e11666f9371d7372f189bf7a12c289851b7adba4cc3d55af45603dc7210f282969a7991de
-
SSDEEP
768:B6r160Fr/Oi1Is35l/fnADF5Hw4Ai5P9lNFF5kY9mvPKNjfhFRaBkYgxkBi1AQIJ:B6r861PnADF5jHvBoYUQtFRaB6xFFIJ
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
138.3.250.75:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/f8f2b2f71133b706578b94371b9d2b2551b8baf285da9bdfb942cde4870fa3b7.elf family_gafgyt -
Gafgyt family
Files
-
27e579d00103d253065684ca94dbb470.bin.zip
Password: infected
-
f8f2b2f71133b706578b94371b9d2b2551b8baf285da9bdfb942cde4870fa3b7.elf.elf linux x86