Behavioral task
behavioral1
Sample
8e72e279c989c83f15ca3ef95f2a090ca6eda0c0d89afaebe03e026170d9fce6.elf
Resource
ubuntu1804-amd64-20231026-en
2 signatures
150 seconds
General
-
Target
1a6d783301450b15938062c5c6ff1bae.bin
-
Size
40KB
-
MD5
c56d96aa87a77ef9a82b48801b068c53
-
SHA1
0bdb589db28e35f83464e102ab17fb906d165fb3
-
SHA256
1de5ea082c3bb5908d8a0b11a0705769e567071a479e3766fcb754934f53fdd8
-
SHA512
6801a2ea77ee0bcad509a2683b98dc2873e885d19d6b35d2f53733592c390a6ca0ce6a348e5774b7d0fcb9d58047587e3aa92230f2665e8f1800279cef419b4b
-
SSDEEP
768:DHQMQiMeyBXeIGdOhBt7fEpC5FFU9PpG+2/5kYbO9alqmJCHXdQWqB+36rfE+sDX:DHpJMBBXeIGmBt7fLi9jG5k7uqiCHXdL
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
89.190.156.159:671
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/8e72e279c989c83f15ca3ef95f2a090ca6eda0c0d89afaebe03e026170d9fce6.elf family_gafgyt -
Gafgyt family
Files
-
1a6d783301450b15938062c5c6ff1bae.bin.zip
Password: infected
-
8e72e279c989c83f15ca3ef95f2a090ca6eda0c0d89afaebe03e026170d9fce6.elf.elf linux x64