Behavioral task
behavioral1
Sample
fc8a9aebf291ddcd9a507868bf293b5c5ecf95de6b6739acd1b84e67932f9b0e.elf
Resource
ubuntu1804-amd64-20231222-en
5 signatures
150 seconds
General
-
Target
ad5778bbe662d7d3d419f33e29eb498e.bin
-
Size
83KB
-
MD5
155efe510422a61356c6cbab7476b436
-
SHA1
74cbc7256958c2d9134166433e870ac13739b6a2
-
SHA256
952df5cb5cba7cb25b556f6c7a4a5e965e4b0d49853047d4edaa30b285dd9a01
-
SHA512
08ca892ccac7c0b27a34ffc24a9c53e1868c6ea795d4693bbaf7931ff34b24482ba7ca044da341b6c6d80604c604f7a8b39fac9bab9fbee624ebad0532bbd270
-
SSDEEP
1536:yhivaJbxBS2mRcOD3uiux91I0EPfE6eWTxCnILr3V7/pWugxa1mLTUPiJJqcV:JuzKeiuafEFWTEnILdjgH
Malware Config
Extracted
Family
gafgyt
C2
239.255.255.250:1900
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/fc8a9aebf291ddcd9a507868bf293b5c5ecf95de6b6739acd1b84e67932f9b0e.elf family_gafgyt -
Enemybot family
-
Gafgyt family
-
family_enemybot 1 IoCs
EnemyBot payload
resource yara_rule static1/unpack001/fc8a9aebf291ddcd9a507868bf293b5c5ecf95de6b6739acd1b84e67932f9b0e.elf family_enemybot
Files
-
ad5778bbe662d7d3d419f33e29eb498e.bin.zip
Password: infected
-
fc8a9aebf291ddcd9a507868bf293b5c5ecf95de6b6739acd1b84e67932f9b0e.elf.elf linux x64