Behavioral task
behavioral1
Sample
9c1d5d407796baafa0dcc26ad07cb3d15cfad83e65d8e195d1dc5b69cc2f6d49.elf
Resource
ubuntu1804-amd64-20230621-en
ubuntu-18.04-amd64
3 signatures
1800 seconds
General
-
Target
276d462653655ff1fc290bf287ebe29a.bin
-
Size
43KB
-
MD5
e959817f59e0429e01d60e63bb1c658a
-
SHA1
df939c0b15be98365bbfa97e4fd5b70d8d866e71
-
SHA256
2cd91f0dac0c24c08242edc82b2ceffcd484386de9468097ca4931fda059f835
-
SHA512
46d7e27abed49539e3603dc77f7666eecc987af02e57bbd232df53bc425502bec3909a55534798c9d2121904192d5fb8f04b30eaae65a1d3d8ea72d8f8e6bbbd
-
SSDEEP
768:qXRQE9EVInSccWJqlyxPtpbYkdzIrvuD1lviy3bsVhrZvWt6u2DCsKPqFVRtdqOt:8RNS1llgVVFdGvMirXrZvXTCstFVRbt
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
139.162.221.59:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/9c1d5d407796baafa0dcc26ad07cb3d15cfad83e65d8e195d1dc5b69cc2f6d49.elf family_gafgyt -
Gafgyt family
Files
-
276d462653655ff1fc290bf287ebe29a.bin.zip
Password: infected
-
9c1d5d407796baafa0dcc26ad07cb3d15cfad83e65d8e195d1dc5b69cc2f6d49.elf.elf linux x86