Behavioral task
behavioral1
Sample
15004ff8c231aa01bad46cf8a71aa08f646e4155f598a2c82ac5a7dc9366c0f8.elf
Resource
ubuntu1804-amd64-20231221-en
5 signatures
150 seconds
General
-
Target
78e8d0437050ed177ca1b870e1285504.bin
-
Size
77KB
-
MD5
883da79ce3aaf3754a3cd58b45884d3f
-
SHA1
f81b1fe2e8bba1be2e609835d93d80fbd1d22267
-
SHA256
7783f53cca547bf06212752d01d0c6a5731fb1250c76834bdd06fc6643e8fa6f
-
SHA512
9163219ae8be46f3785cda25ed4a95a8f713a719a5aa395045555d8ffd31a60862615a9a39e75ea227dc4af6e268dd4e1e07af2abb400c0440155592928fcab3
-
SSDEEP
1536:SSZBD/2DeKRPU5o+5m6LLE1UtJCxmrkyUU5EuHDo+/2:LBb4emM+I41Ut6Y3UUNHDoc2
Malware Config
Extracted
Family
gafgyt
C2
239.255.255.250:1900
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/15004ff8c231aa01bad46cf8a71aa08f646e4155f598a2c82ac5a7dc9366c0f8.elf family_gafgyt -
Enemybot family
-
Gafgyt family
-
family_enemybot 1 IoCs
EnemyBot payload
resource yara_rule static1/unpack001/15004ff8c231aa01bad46cf8a71aa08f646e4155f598a2c82ac5a7dc9366c0f8.elf family_enemybot
Files
-
78e8d0437050ed177ca1b870e1285504.bin.zip
Password: infected
-
15004ff8c231aa01bad46cf8a71aa08f646e4155f598a2c82ac5a7dc9366c0f8.elf.elf linux x86