Behavioral task
behavioral1
Sample
e13a84322492b13cba8e33627d1fbba445c4a30d957469598f3fa6ea835c2e19.elf
Resource
ubuntu2004-amd64-20240221-en
2 signatures
150 seconds
General
-
Target
54d5e3e222a43cbd3d2372ec2bdde0ed.bin
-
Size
35KB
-
MD5
74c46ef8025116fdc5566fbc1fceb080
-
SHA1
176e8a02807e960b284846dc6e241dda1dd40e75
-
SHA256
e8bdfd5aef7af81c329688c2404d4031fce457ca7c2dcaa98a50813726428d99
-
SHA512
6024d189a6517d374cc71085c9a2c5f2def3a684d06be810202761a8661e60bb67d07da13aeb47dbcb782c16ba84642bd8d8c2edda6dafc974f3b886b3c2cee0
-
SSDEEP
768:za2LEOd/gb61HfaRbAnO4YoNJdoMev4QCblGDyARP2fLQbq6:za2LEOd06ayAoT0olGDyA52f8bq6
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.144.165.227:22
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/e13a84322492b13cba8e33627d1fbba445c4a30d957469598f3fa6ea835c2e19.elf family_gafgyt -
Gafgyt family
Files
-
54d5e3e222a43cbd3d2372ec2bdde0ed.bin.zip
Password: infected
-
e13a84322492b13cba8e33627d1fbba445c4a30d957469598f3fa6ea835c2e19.elf.elf linux x86