Behavioral task
behavioral1
Sample
b295c5f4601711e060c6b46a076a5cbb986e25176d5ab6b7a5c25b413e7087d7.elf
Resource
ubuntu1804-amd64-20221111-en
1 signatures
150 seconds
General
-
Target
be1d4033854814cd14a69bf8f1cba003.bin
-
Size
47KB
-
MD5
fbbf51dcbd22742e8f6a36e043a63d73
-
SHA1
3b297fd97694d8846c3c686e4bff4c90e1b60292
-
SHA256
3943cbcbe610b09f62f398de82bff91a21febe5f3c741a5329b925a1d414ee0b
-
SHA512
7ee2ece668daef33c1fb233fb51eff513bc2156a9aabb9e53da39072457cdccdaa455c206bf60e48f9ea1a067718ad703843979ed9d149c1fcc70a78ee0e0bd6
-
SSDEEP
768:3SfocFIQK4wfFThIyzZDXjycsb/jfxqB2UtIJAroPCJWHSKbVCBJQqJFjovnS5s6:3KocFds9ThIWZfyl7JU/KeoP6Wy8QJ2m
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
139.177.202.27:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/b295c5f4601711e060c6b46a076a5cbb986e25176d5ab6b7a5c25b413e7087d7.elf family_gafgyt -
Gafgyt family
Files
-
be1d4033854814cd14a69bf8f1cba003.bin.zip
Password: infected
-
b295c5f4601711e060c6b46a076a5cbb986e25176d5ab6b7a5c25b413e7087d7.elf.elf linux x64