Behavioral task
behavioral1
Sample
7c91585187374dc9640d586463e42af1.elf
Resource
ubuntu1804-amd64-20231026-en
ubuntu-18.04-amd64
2 signatures
600 seconds
General
-
Target
231010-ynnltsae48_pw_infected.zip
-
Size
37KB
-
MD5
d71d2d7aa2460362906b2897aba113e1
-
SHA1
51c762940630b0ecd2133b6de364f2080069154c
-
SHA256
46facf4f7f23395bbc1c2c846347ddf7af74c7f3a4cedb78f48d480e6613bcfe
-
SHA512
da84ca0097885f6ef0034b1a1b397982c3ddeefe5d5079cab329d94dd68024c3d945dce5360f84bfbf7374aed328aeda6faeccbc0693a89fe9150aa48d9c3d45
-
SSDEEP
768:a+6s06sSlF4slH35faNS2NckRUhPF+Hf9Cv8SzmEVjej/TKoD+zNTXgd:a2vsxslH3V2NQ5FICHzmEgy5TQd
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.123.85.14:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/7c91585187374dc9640d586463e42af1.elf family_gafgyt -
Gafgyt family
Files
-
231010-ynnltsae48_pw_infected.zip.zip
Password: infected
-
7c91585187374dc9640d586463e42af1.elf.elf linux x64