Behavioral task
behavioral1
Sample
1df17eef596bde698c42aa9b64782cddc13459cc3b850f6e8a461a1f2609f019.elf
Resource
ubuntu1804-amd64-20221125-en
2 signatures
150 seconds
General
-
Target
4a0067c160333e640fa2f8d170403602.bin
-
Size
41KB
-
MD5
3ffd8a0ebc2a7c7259a3603c8d4520a7
-
SHA1
edee32177765d7c408d2b280e769f3800c919c91
-
SHA256
3ff77073efc24642cc56a175b6b534a79fcfd669c988a97a3dcbc58eac47d74e
-
SHA512
a105cb41184e97271dc9878388bf3137fb9f7a2c6ea831d58d631ae63b4aae8b113255a871b62bf64ab41f997a99ef5ab779742d746b05b9af1905e16b561247
-
SSDEEP
768:pjyltkxYnG7ignIqgL0lzE73eRivUiWYfPHknfHoo64AJdOt7L/e0JEeZP/SqX:hyHkxR7l3A1QEPEPoXrglDe+J/SI
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
176.111.173.27:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/1df17eef596bde698c42aa9b64782cddc13459cc3b850f6e8a461a1f2609f019.elf family_gafgyt -
Gafgyt family
Files
-
4a0067c160333e640fa2f8d170403602.bin.zip
Password: infected
-
1df17eef596bde698c42aa9b64782cddc13459cc3b850f6e8a461a1f2609f019.elf.elf linux x86