Behavioral task
behavioral1
Sample
48dded1df039fbd025d8ae638c380d5b633a0a782ee7e75ebdeca5dcb1195254.elf
Resource
ubuntu1804-amd64-20240226-en
2 signatures
150 seconds
General
-
Target
e3dda907176a89618018c59f8c6a7d8a.bin
-
Size
41KB
-
MD5
80b91aa94d8a4fe8a19df75f57332f0e
-
SHA1
782149b41ee1f0251b44fac4429d4727f1601a19
-
SHA256
256df100fbe28b376bc847f5f9498f04feadedae7ea5912d85b94159d428f102
-
SHA512
2e8ebe4762686067f8b03eab7c3396a45a04a86d536bc04c54d64bd69096103e47e14aac5db096a3b45be1eff337bda2466ea76d2d6dcd6d2fb009a0dcc9df0c
-
SSDEEP
768:5e/4aKeilmP9XI5UInI0rfs6AQCqqcuW6YCS2kjj6tGuWqjaKDC/Zobs:5eQ/eiYlXI51I0rf4QrqW67S2Sj6tZ7u
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.145.42.90:4444
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/48dded1df039fbd025d8ae638c380d5b633a0a782ee7e75ebdeca5dcb1195254.elf family_gafgyt -
Gafgyt family
Files
-
e3dda907176a89618018c59f8c6a7d8a.bin.zip
Password: infected
-
48dded1df039fbd025d8ae638c380d5b633a0a782ee7e75ebdeca5dcb1195254.elf.elf linux x86