Behavioral task
behavioral1
Sample
f648db3925b1fdad98036e9962258de113c38bc6cf0d46ac76584840a7691931.elf
Resource
ubuntu2004-amd64-20240221-en
2 signatures
150 seconds
General
-
Target
081f48201afc5bcfebac631283ecdae0.bin
-
Size
38KB
-
MD5
55a67dc396dbf2e30fe39825cd0b96c1
-
SHA1
07f9d176fcca78a5a31a12788ef1b3ec081ac3a9
-
SHA256
75a44ffe672c8cb4ea08fa91545bacab26a67c546667d14b56365d1a25778c7a
-
SHA512
10e505bae9b17b582020f37ced215d3515d4ccefa6023110556b46751f7e8094554182d2198ac0f41dad0b29f9509938a87589dd6b066ac68624842075c1c9ea
-
SSDEEP
768:XJksfSWCnipeciOQNPa0c7CGNsF1qLSlJNEuvk7hc2fc5s7ImoPIJS:Zksfp/7CCsF1aeEughcGc5s71w
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.144.165.227:22
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/f648db3925b1fdad98036e9962258de113c38bc6cf0d46ac76584840a7691931.elf family_gafgyt -
Gafgyt family
Files
-
081f48201afc5bcfebac631283ecdae0.bin.zip
Password: infected
-
f648db3925b1fdad98036e9962258de113c38bc6cf0d46ac76584840a7691931.elf.elf linux x64