Behavioral task
behavioral1
Sample
5b94e1be0e18af547d012489780b8809e7548e6446f50fded986e7dbf7846d99.elf
Resource
ubuntu2004-amd64-20240221-en
4 signatures
150 seconds
General
-
Target
ad1e8953335a08237641bd735988b089.bin
-
Size
45KB
-
MD5
0433d7210c564bb5db692866b2df1d6d
-
SHA1
e26452212413ca9b871835c6aa58bed0b12b02bd
-
SHA256
753cb6b463adea2450a0a4943ac558614820d9f14a7c12c0d4623704c372a194
-
SHA512
2a11c3012a6930348eaeca5e4186c54b4047569fcfc4e02e86591064e252dab066b69ae25978bbbc0628188126f8d39c20e5f6b0daca0db86312d7e94e963384
-
SSDEEP
768:oDpCjWnD6Ikt31J6+VoHNyZHdHh5kRhV09FpjN5Av1JQkxM1egCVJJ8St1bSuqFv:wCjMD6Ia6hwtz0h69bAJ7xjLbXcc+QYn
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
91.92.254.140:562
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/5b94e1be0e18af547d012489780b8809e7548e6446f50fded986e7dbf7846d99.elf family_gafgyt -
Gafgyt family
Files
-
ad1e8953335a08237641bd735988b089.bin.zip
Password: infected
-
5b94e1be0e18af547d012489780b8809e7548e6446f50fded986e7dbf7846d99.elf.elf linux x86