Behavioral task
behavioral1
Sample
bb8ad39a7dbd454077bd7c920ea621ca42ddfdcc13b2330cb4d912572a45c320.elf
Resource
ubuntu1804-amd64-en-20211208
2 signatures
150 seconds
General
-
Target
2b26207fd6b9c2372e1ac24ffca57ee2.bin
-
Size
37KB
-
MD5
623d34d4fd10926ad25110b90a296f73
-
SHA1
aac5d9bc08f61d20413e3ffb6ed5b2094910fdc2
-
SHA256
ba0c62cd9d462564cc3c967208fb7ab2f0a48e8484cfcf675b4b58314539854c
-
SHA512
28b4ff2400a3b25e05ba372934dea26a0dd5ad2d5eb3b97a3f3512b0541b55fef1575d820b4b958788382fc5f64e67dcb6773e767d42dca479cebc1d43003b40
-
SSDEEP
768:Eff93nBjTNBfeSXOxmGXHbeDkUmpv+zfEMFbHp/mzk3doFIX+wnq2W8jibI132T:4f9XBjTNBrQmbQUO+wMFbHp/medoC++i
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
209.25.141.223:18065
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/bb8ad39a7dbd454077bd7c920ea621ca42ddfdcc13b2330cb4d912572a45c320.elf family_gafgyt -
Gafgyt family
Files
-
2b26207fd6b9c2372e1ac24ffca57ee2.bin.zip
Password: infected
-
bb8ad39a7dbd454077bd7c920ea621ca42ddfdcc13b2330cb4d912572a45c320.elf.elf linux x64