Behavioral task
behavioral1
Sample
bb78e6c828d241b87c2f45151ec64f21075fa2c7655646a1397d40a376dcd0fe.elf
Resource
ubuntu1804-amd64-20221125-en
2 signatures
150 seconds
General
-
Target
391be0237e68cfb38e1b9af34641e6b1.bin
-
Size
47KB
-
MD5
4ffcfeed04d126b7e61f93a516e04a2b
-
SHA1
6480ecd3b7e7704b35c9046ae1ce41cbfb31e1a7
-
SHA256
1effc545602844bdeedfd680dc85edc6b65788032c50b38dd83d87eb78ca0d05
-
SHA512
7422489248f10e742e96166a4680145b785871321c3435b88d91f50f58eb9a24421ddad1f992d27ef96b6e6c3d8464d2efdf7607b0bf5363144cf035271360ab
-
SSDEEP
768:H2Ui0eV4wFwv6PYsKhxAYtBLC6dvxc0ydxDAd2k3Rhm+VbL6VIjCv6BI1qr7xj7a:H2B45C/KTztBLLe/dxMThhmqbL6VFv6q
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
138.3.250.75:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/bb78e6c828d241b87c2f45151ec64f21075fa2c7655646a1397d40a376dcd0fe.elf family_gafgyt -
Gafgyt family
Files
-
391be0237e68cfb38e1b9af34641e6b1.bin.zip
Password: infected
-
bb78e6c828d241b87c2f45151ec64f21075fa2c7655646a1397d40a376dcd0fe.elf.elf linux x64