Behavioral task
behavioral1
Sample
5945604da54c7b80c94c454b13518ba23a4f7a6533522eb4b225529af6bd4e1f.elf
Resource
ubuntu1804-amd64-20231026-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
551ed083bf5e24e24b1a432ab5616acb.bin
-
Size
42KB
-
MD5
9f0f99572e50edd7c03450d665848271
-
SHA1
5b2616a5542025543c3155569f41fc3310c73216
-
SHA256
7381903306c2f9ca9ea0b6242cceb7d1c1986f90b3dc18ddfa4ff6be01adfdbf
-
SHA512
a7d582c676151113a2726f3cce958f8d8c6ac70947e6205d3a7e1297f7e20d7ef80c1789e2f3b23a51ba103cf8ba175805ee79aff182df764ebe9525c838f722
-
SSDEEP
768:YqqpSQ2IYRRpRJDJu/8YqaG12S/hrk784F89nKcVXMWX99eH4TvJJ9eUpB7vPQ4h:Y/peDJukU2yFunB99u0vgCDQ4WjLi
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
178.218.146.89:839
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/5945604da54c7b80c94c454b13518ba23a4f7a6533522eb4b225529af6bd4e1f.elf family_gafgyt -
Gafgyt family
Files
-
551ed083bf5e24e24b1a432ab5616acb.bin.zip
Password: infected
-
5945604da54c7b80c94c454b13518ba23a4f7a6533522eb4b225529af6bd4e1f.elf.elf linux x64