Behavioral task
behavioral1
Sample
8a4326d5b344950f84622d8340364edf383d0dd887a66320068d9fac2e8f072b.elf
Resource
ubuntu1804-amd64-en-20211208
2 signatures
150 seconds
General
-
Target
89590fcd9019a0b0ece2a51fd517e17d.bin
-
Size
40KB
-
MD5
1355567095b8d1bbc89a16f1bf6e2a6d
-
SHA1
ff3c2c9fc130ea4500a268a69c00910738048fe0
-
SHA256
0b420f62c7fee977656fd2c6b7ea834ca05b0f61cc25541b6b4b52ad48de8602
-
SHA512
ee5888a7ee5c517261614c21af999dd74fcc29ea1422b35d16281b41fb690d4987d931853198b13898b693a6bacdf166a65cbfb9de5e898df4e28c667e86b3ed
-
SSDEEP
768:e291S9Emf2zd3cNVfDj2BbqJoK2KfM9KQ8rYCd/upmRjZ/MGoS:e809EI02VfXuCoIkoxrYCAE9MGP
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.128.232.76:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/8a4326d5b344950f84622d8340364edf383d0dd887a66320068d9fac2e8f072b.elf family_gafgyt -
Gafgyt family
Files
-
89590fcd9019a0b0ece2a51fd517e17d.bin.zip
Password: infected
-
8a4326d5b344950f84622d8340364edf383d0dd887a66320068d9fac2e8f072b.elf.elf linux x64