Behavioral task
behavioral1
Sample
fb3743ac5374804c4b7ac4f74c497b432e515d391baa68f02d0670b6106dca3b.elf
Resource
ubuntu1804-amd64-20240226-en
1 signatures
150 seconds
General
-
Target
d76d2bc81329e13416b02637805f439a.bin
-
Size
47KB
-
MD5
dbb98720f74fe3ff40080a02573cccb4
-
SHA1
1a228176c1bc8a422bfc10deac3e2e0de97cf492
-
SHA256
3216262f31b08ac3145f1196737d657452cbb2eba196f0b142a012c1a3af3047
-
SHA512
f0e9789d6d74b3639568b2d58995b6c84b531105f5609ab615daef2ea73d0074f2626c9455c3c9bc39d7db472919be131ecc2d975f8995683a0ba22d73004d1d
-
SSDEEP
768:PqrS7ZVCiI9kNoLXgDSyTKN73kZOEVKGdx81slLwNlaQroF3pQLT4e+CGiTEx2wR:PYS7ZVS9kNoLKSySYYy9x98ldroPucPr
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
37.221.65.177:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/fb3743ac5374804c4b7ac4f74c497b432e515d391baa68f02d0670b6106dca3b.elf family_gafgyt -
Gafgyt family
Files
-
d76d2bc81329e13416b02637805f439a.bin.zip
Password: infected
-
fb3743ac5374804c4b7ac4f74c497b432e515d391baa68f02d0670b6106dca3b.elf.elf linux x64