Behavioral task
behavioral1
Sample
9bc327c4c38ba01ab74ff3700c399d0455412b4cc4048fcd8a6d18b9e4b072ac.elf
Resource
ubuntu1804-amd64-20230831-en
1 signatures
150 seconds
General
-
Target
d6192e1e29c2bc31fa738548889dd12bbin_JC.zip
-
Size
47KB
-
MD5
5a0fb8371438f4bb6395f6823a700be0
-
SHA1
a3a54f7651076a9bb6843c40e3187774ed1a68f3
-
SHA256
4e8e93a8a23f03a0d59f7cdd17ac197980a4ee71daa330d5741ead554333cc5d
-
SHA512
9c82b082b15c807f40d75c22d9a2f954975ed9d05cbbfda9c495ede3567e2a9173c45f3c843f87c35f58b4c7a596565abfa79aabbff2307604a42ba99a68ca30
-
SSDEEP
768:mx9nj9U3IWDhfANQBV5jTdUEPmnqgQiF/CXp4vlUOItNtMf8pQoAsXyeUbfwUMSA:mbn4f9YNQBrTdgb/C5w8/tw8pQzZccyP
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
162.240.100.4:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/9bc327c4c38ba01ab74ff3700c399d0455412b4cc4048fcd8a6d18b9e4b072ac.elf family_gafgyt -
Gafgyt family
Files
-
d6192e1e29c2bc31fa738548889dd12bbin_JC.zip.zip
Password: infected
-
9bc327c4c38ba01ab74ff3700c399d0455412b4cc4048fcd8a6d18b9e4b072ac.elf.elf linux x64