Behavioral task
behavioral1
Sample
6b2df2a357c8479af1e0c29be5b979dc6718f9e7a96649fb8c82dab81f02ea1a.elf
Resource
ubuntu2004-amd64-20240221-en
ubuntu-20.04-amd64
2 signatures
150 seconds
General
-
Target
7fe712155caf0c561643878f80731d9b.bin
-
Size
44KB
-
MD5
5117c118614514e2c2fc6fd09e29f7f5
-
SHA1
83d085857e160704e90e6d792ac91f07648a9cf7
-
SHA256
5b541c07f00b8b5664b9eb5a54048a49e2127133a6236fb1878857200c4aadc9
-
SHA512
103cb0730e4e34d1324cc2acbc017086c1d05023df24fdd87dc00474a3fb60d10dd8fa1b201818a5188a44dd743717c179f09aa6662fa0498bc3cc0ac73983ae
-
SSDEEP
768:dqaOqooCRqMYkOlM3TPIURe9xXSCWtwE5/SLFv9o+YWrjRlu0f8PnuSysU:ddOqoo6NYkEUTP5UZSCMwE5GFv9o+YWJ
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.145.42.90:4444
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/6b2df2a357c8479af1e0c29be5b979dc6718f9e7a96649fb8c82dab81f02ea1a.elf family_gafgyt -
Gafgyt family
Files
-
7fe712155caf0c561643878f80731d9b.bin.zip
Password: infected
-
6b2df2a357c8479af1e0c29be5b979dc6718f9e7a96649fb8c82dab81f02ea1a.elf.elf linux x64