Behavioral task
behavioral1
Sample
1bd0f72d61cd4df36243fc4b6031936ad8fc5235ac38c8817f4d6f061bdec65d.elf
Resource
ubuntu1804-amd64-20240226-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
7238ec7e3f6b7b4b479103f54d6b1b4a.bin
-
Size
42KB
-
MD5
65ef8823f20cadacfd2cbad2b4b36d57
-
SHA1
8e6cba7f116f10163ea7a22c7f4dc0f8ac81d614
-
SHA256
5e766266d4887b81be78aa8a3d84a2aec0c873a3aa33733f2cf0d6cb15ad8beb
-
SHA512
b90d8237957b6ca79e8fd5b6c039527afdace14b7721c1ae3d5406f6a829fae6e4d80d3f47bbf1d39737db8fd4ffb3d86b432a48ceee0fd72bbf50053d32f065
-
SSDEEP
768:awnx5ZgPQkmCKhPfm0izkQgugC/aaxn48gJ/KbJjXCcI3xFZksoxSrPzFLXBa9/Q:ay5EWfOFDZgpKdX7QZiYbzFLXBa9/Q
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
103.173.255.143:839
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/1bd0f72d61cd4df36243fc4b6031936ad8fc5235ac38c8817f4d6f061bdec65d.elf family_gafgyt -
Gafgyt family
Files
-
7238ec7e3f6b7b4b479103f54d6b1b4a.bin.zip
Password: infected
-
1bd0f72d61cd4df36243fc4b6031936ad8fc5235ac38c8817f4d6f061bdec65d.elf.elf linux x64