Behavioral task
behavioral1
Sample
afc6fe19fb874b3a322266e3ff1c5c1f1a44298ceb499cb2735e5638b63f3b49.elf
Resource
ubuntu1804-amd64-en-20211208
2 signatures
150 seconds
General
-
Target
fe5701a6011fc6567db1a141e2e2e99e.bin
-
Size
42KB
-
MD5
e73a3a53530b8675a13414d00a576156
-
SHA1
e07b44c4d32d215437dc27d170e4402353e5d57c
-
SHA256
0d6665f64023cd4592a29890bdfef35b8091806fa825e91cff825b0b887a4d69
-
SHA512
b2b1caaa7f78d491f1bf0069f64e144833841a79ca50bba598dfb7c62e5dfad7ed74bbda5876c8064d44cae9d7d37eccc8eed51f30777453651c2fe6d7413766
-
SSDEEP
768:tup0JQMbBoLTWEkJ1O+8SPn+7BrZhHoEyIJhYKoVZ1UIeSf9EDaYEq9x8WD:tJBMTP6n2B/HbJhYFVZ1rE+YEq78u
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.88.66.177:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/afc6fe19fb874b3a322266e3ff1c5c1f1a44298ceb499cb2735e5638b63f3b49.elf family_gafgyt -
Gafgyt family
Files
-
fe5701a6011fc6567db1a141e2e2e99e.bin.zip
Password: infected
-
afc6fe19fb874b3a322266e3ff1c5c1f1a44298ceb499cb2735e5638b63f3b49.elf.elf linux x86