Behavioral task
behavioral1
Sample
50381f61ef742cf02fae1e58bfcfeb74d8607b532e995db6d006133fdd49c951.elf
Resource
ubuntu1804-amd64-20221111-en
2 signatures
150 seconds
General
-
Target
c51a48da89140bc703327dc6f642197c.bin
-
Size
44KB
-
MD5
bbde6d117652206e70a9c1762a025ad1
-
SHA1
7244ce6cb31db21ea7c26ec48e40a73394c62d66
-
SHA256
35c1517210a636f89117ccff28107b929ea78769d3709fc432ecd6c8acd6b191
-
SHA512
e74248bf492800ad5f18cadd7d5f1e31fb9c729d1fa477e577eee5054e92d3bfb63262f5d8d401f05d7ee08f1df32b00fbbe5872dffda83752a26965da054201
-
SSDEEP
768:UrQ+1V8TatSHPK0VzXbUmLfCtySkVxSLmSN0bUMzKKuCEVWCD5ex2lo9xusP5yh3:UrQ+WawHPK0FLUMfCtaSNcUMkCEVWGeu
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
87.121.113.2:4261
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/50381f61ef742cf02fae1e58bfcfeb74d8607b532e995db6d006133fdd49c951.elf family_gafgyt -
Gafgyt family
Files
-
c51a48da89140bc703327dc6f642197c.bin.zip
Password: infected
-
50381f61ef742cf02fae1e58bfcfeb74d8607b532e995db6d006133fdd49c951.elf.elf linux x64