Behavioral task
behavioral1
Sample
005017953e814a1adcb3f319f6a3693dc765e1a083e8a50f0d3d8c2b15129b7e.elf
Resource
ubuntu1804-amd64-20221125-en
1 signatures
150 seconds
General
-
Target
7c295800d703eb3dd41fa5c3adb70b6d.bin
-
Size
43KB
-
MD5
7966b877a99f923483373f9e4f85631a
-
SHA1
26561d33452f17971f6c0eb6cc05a6e6936dd1e8
-
SHA256
a2a787b840836a73ec04c7994090530860ce23ea1a1a520e7c33838afcd76d99
-
SHA512
b166e2dd326c54a3e6e3358456989fb464a61d1d73396ce6a3c12a3f1f97baa8dd38ed0ae5ca51148a49966185bb25e28c041647e6e4f1a15b904b8d6149a75e
-
SSDEEP
768:Hu75b3olTsaYLsXvFMFMQX+BmTjhZ241pD+i1tJjnMfwyZh/vKBgOnp0eN:ub3BkFPnBSFz1pDHlIpnvKbx
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
139.177.202.27:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/005017953e814a1adcb3f319f6a3693dc765e1a083e8a50f0d3d8c2b15129b7e.elf family_gafgyt -
Gafgyt family
Files
-
7c295800d703eb3dd41fa5c3adb70b6d.bin.zip
Password: infected
-
005017953e814a1adcb3f319f6a3693dc765e1a083e8a50f0d3d8c2b15129b7e.elf.elf linux x86