Behavioral task
behavioral1
Sample
eac009df353d224b3a564310e10e1aea77e0cb8806e56ec0c8dbe84a3af4747e.elf
Resource
ubuntu1804-amd64-20231026-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
3df0019a19de826cb82dbe55c5564c81.bin
-
Size
38KB
-
MD5
913cad22b0ca5bae7fa961c776fa3e97
-
SHA1
c388b53cc6e0a662c31e2910caf7892134035a40
-
SHA256
252ce98f6a78beff46f1b7326b7a48328e082347b0806a8de3e159e741d0ec9f
-
SHA512
d209a1254a1bdbe9e7a60930226c132ba5acb8f4ac0257bdae7d5bef22986909a22bb236dea8a705545af4b78bd1bd668e4242cf7803d88cfc2282afc9978a9d
-
SSDEEP
768:tBGAQndNptCKB78M8ztNzjfcdJv0Z4gc2u77pwojcPKq+TRXrqS:tBqdNptCc7QtNPfcdJvm7u77prYSqiXh
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
103.29.2.134:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/eac009df353d224b3a564310e10e1aea77e0cb8806e56ec0c8dbe84a3af4747e.elf family_gafgyt -
Gafgyt family
Files
-
3df0019a19de826cb82dbe55c5564c81.bin.zip
Password: infected
-
eac009df353d224b3a564310e10e1aea77e0cb8806e56ec0c8dbe84a3af4747e.elf.elf linux x86