Behavioral task
behavioral1
Sample
d50c81a8d9aaa103ccc7ddfe256124aa799d27b82e42c075ff67dbad07664343.elf
Resource
ubuntu1804-amd64-20240226-en
2 signatures
150 seconds
General
-
Target
dcfdd4f8c1687abf9093992db5c2a1d2.bin
-
Size
44KB
-
MD5
1dde034ce16e2a15845a65abc6db1528
-
SHA1
8482d6b9a77cd97d12e937933ef56dcf3bbeeef2
-
SHA256
ae79886998d5989096e222b30577dd7ffec7de6f7a1591635cc09eb0891781df
-
SHA512
842551391e26d1a87c8ce210ea2cdc0c35c1f410b02f1fd5dff1b0104b934fcaff345a9ade3b08a0e6eb0490a18d11e29ea3463ad782e3eb7fbd3ad004ada19c
-
SSDEEP
768:79WGpot4u31hp228YWAg9GBNixX2lziJoLDCK5wEv7rEm+NxolQZrnZl7pQTqxG:7AAoaQ1hp2wjgONiV26M+Ov7A3PoWZV0
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.196.8.31:76
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/d50c81a8d9aaa103ccc7ddfe256124aa799d27b82e42c075ff67dbad07664343.elf family_gafgyt -
Gafgyt family
Files
-
dcfdd4f8c1687abf9093992db5c2a1d2.bin.zip
Password: infected
-
d50c81a8d9aaa103ccc7ddfe256124aa799d27b82e42c075ff67dbad07664343.elf.elf linux x64