Behavioral task
behavioral1
Sample
9f4f50fe4255223d4549ed03b747711103330295d2888e2ed6e7e19d0d68ea02.elf
Resource
ubuntu1804-amd64-20231026-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
d6617f2014f5a3ff30bc172ee06421ad.bin
-
Size
40KB
-
MD5
013e216401390f6c7de34452904fda4b
-
SHA1
c5c1e06df6941703d45a03e46e826be578fc3773
-
SHA256
71903d73a0c4916feb60ac9006f77dde6001a950f7516ac51ba5f0c9eedf7a12
-
SHA512
ce57a2275e5938cd6a23f6428a06a02e7d87b49792125c55312eb74d724e4c2c78bfe9736df97fd15266bd19547d4361749617c94fe62f3c2edde5c95c7bf8a6
-
SSDEEP
768:p8kJ3oI5ZKsCwTxm53Am3/x9tVNeIcyFTKLsHmBYOs4nG7++s5WGdxkss5bxTzj:p86D5Jk53F5XV4I/FTNmlFnG7++ASBbt
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
178.218.146.89:839
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/9f4f50fe4255223d4549ed03b747711103330295d2888e2ed6e7e19d0d68ea02.elf family_gafgyt -
Gafgyt family
Files
-
d6617f2014f5a3ff30bc172ee06421ad.bin.zip
Password: infected
-
9f4f50fe4255223d4549ed03b747711103330295d2888e2ed6e7e19d0d68ea02.elf.elf linux x86