Behavioral task
behavioral1
Sample
f9d4f7961d5e58060c0219df1594a9486cfe2bab084e8b1d2d276faf6da2c65f.elf
Resource
ubuntu1804-amd64-20231215-en
2 signatures
150 seconds
General
-
Target
8c911e6d5821e21c84fc4414957918f5.bin
-
Size
42KB
-
MD5
672b67393b27b3605246c0c3bfd2d44a
-
SHA1
689c825f6eaa39160255613894ef82709ffbb985
-
SHA256
92b9729b0c3559c04ceb982076eaf03e2a07806bb10983c9a606f813c92f723e
-
SHA512
23fec5d3dcfa5fda70bcf64adad29a50c902e032bbc1b25d0b3bafc5d49fffb1b17897292d22a41d7fef4c58e7a568b7448e9e54d9e4d3dba99ae68b63c88d78
-
SSDEEP
768:R0/pWLSFFm+R7GvmtulMIO5wCschUv0DTHcw/Og9+YPRO3gxg9Xh5OYHQF9MwF8E:RnSFErv6ulMrsSUsDzEKawxg9Xh5TeF1
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
51.250.72.163:839
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/f9d4f7961d5e58060c0219df1594a9486cfe2bab084e8b1d2d276faf6da2c65f.elf family_gafgyt -
Gafgyt family
Files
-
8c911e6d5821e21c84fc4414957918f5.bin.zip
Password: infected
-
f9d4f7961d5e58060c0219df1594a9486cfe2bab084e8b1d2d276faf6da2c65f.elf.elf linux x64