Behavioral task
behavioral1
Sample
40cea0fd6a719373eeeaecb444ff7b7c93f096d868e22d867a34e4824e9dcb16.elf
Resource
ubuntu1804-amd64-20230621-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
c3425a2839883dbec80af2c4dde02e98.bin
-
Size
40KB
-
MD5
2051e26ad3758b413217ac3b72df0889
-
SHA1
0479081b35d53564785a9fb5ea0455a8ca064733
-
SHA256
2fc30cff81a02e10fffd4ef4ed1758075c30274d77e23d36e64459b0967afc4e
-
SHA512
a7e8d204f83b01960eb80b2c670dd86f2200bbe752005c57a3feb7198e27108b01b7fc9b0e61bd27812c30c8e7f641aa8c43c88b19c58ae1a3d9ef3c8f6fdc73
-
SSDEEP
768:Cfi7fM+8XbPsNnsFhGGM+GW/75idoARfUL2LzgEb5t:CfuQLkNsF8Gd5N6L3Vt
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
5.181.80.134:888
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/40cea0fd6a719373eeeaecb444ff7b7c93f096d868e22d867a34e4824e9dcb16.elf family_gafgyt -
Gafgyt family
Files
-
c3425a2839883dbec80af2c4dde02e98.bin.zip
Password: infected
-
40cea0fd6a719373eeeaecb444ff7b7c93f096d868e22d867a34e4824e9dcb16.elf.elf linux x64