Behavioral task
behavioral1
Sample
798e939fe26112b9b01ead505087a3e05fa83ecfa7b6c4cb19c4b5ebe43f80cb.elf
Resource
ubuntu1804-amd64-20231026-en
2 signatures
150 seconds
General
-
Target
798e939fe26112b9b01ead505087a3e05fa83ecfa7b6c4cb19c4b5ebe43f80cb.zip
-
Size
40KB
-
MD5
1710068b0aaf27cc287fb6970b5180ed
-
SHA1
2befc1127f195b92cf7fa0147de161b27a5ba404
-
SHA256
c367ddde63fcc9fddb08084d9c48bc29d510c00e7040c0eb0917c12906d06414
-
SHA512
f34d0c87a67afe0a069e61cbe4ce94a1640780673c05c280ed70c47d7271313d64cab1837560c0983571edb2f239f805a31f206b422d33a61400f08a4dd9bd95
-
SSDEEP
768:i6Eiu4BG+y3WwwY9F1TDNrifg/ObYC0eHvdW8RAoxb0hF616iVLWiJ:iKBG9FZZWfc9b6Yi7E6kgfJ
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
188.166.67.116:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/798e939fe26112b9b01ead505087a3e05fa83ecfa7b6c4cb19c4b5ebe43f80cb.elf family_gafgyt -
Gafgyt family
Files
-
798e939fe26112b9b01ead505087a3e05fa83ecfa7b6c4cb19c4b5ebe43f80cb.zip.zip
Password: infected
-
798e939fe26112b9b01ead505087a3e05fa83ecfa7b6c4cb19c4b5ebe43f80cb.elf.elf linux x64