Behavioral task
behavioral1
Sample
39c6bbe7ca9f6929af5e412df29e6e0067d2ba2bfe4651cade1fc2bc471c01df.elf
Resource
ubuntu1804-amd64-20240418-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
76da29e196d3f0969377a38ccaf7b6e1.bin
-
Size
45KB
-
MD5
88e98a218a003e0bc658945537fd4711
-
SHA1
4aa1943572c82d691d2b8ef4455a9a7c7a1786f9
-
SHA256
0e5a0f534cb3566f48fe26f23c0bb5c353e8618930daeb61d3a69c55485998e4
-
SHA512
9d25ee75b884936cefcf006d5bbdaed711b128c02ef7a3623a7ee5da84928f35266676f33d56aa39c2a831b22c26b024aef9fff69e8d2ab788eb1e13835c19b9
-
SSDEEP
768:1ZKpP4zOoKP3toGoZa3OKqEd9pnyR0U56WPoTiX3CJZfyy6Zv1a2RkZ5OEkIo/f8:1PrKP3udZRK1PnwFnPR30ZfyVZvLyDq8
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
2.58.95.131:65480
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/39c6bbe7ca9f6929af5e412df29e6e0067d2ba2bfe4651cade1fc2bc471c01df.elf family_gafgyt -
Gafgyt family
Files
-
76da29e196d3f0969377a38ccaf7b6e1.bin.zip
Password: infected
-
39c6bbe7ca9f6929af5e412df29e6e0067d2ba2bfe4651cade1fc2bc471c01df.elf.elf linux x64