Behavioral task
behavioral1
Sample
66b79fcfb763dc11d03de8a1da3e50f9871be1d1e64e805c7dc14e987e4150f2.elf
Resource
ubuntu1804-amd64-20240418-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
28558da23525f76914895bf4497995e6.bin
-
Size
57KB
-
MD5
85ab1153c291a551047595b22ca46165
-
SHA1
c807b0e74cb428f084e9e5dcf25bae719d61a70c
-
SHA256
517d941edaee136be2f206edb91709d4abbe6075b3b906a2721546f4d791700a
-
SHA512
f5fbb110193e4cf1ff2a43b7adcf386eeb13806aa374cfcf60e5250d5c65488231b0eb9dc09a20afd2a7f5928b9143673ebe16ed51af462c872e4a39fbe691a8
-
SSDEEP
1536:sRMuLXoWMIoZOxcyuXKDo4/IxN4ChHgylj8QIk3Ha:sR3kiISgxCChHtjFII6
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.196.8.31:3221
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/66b79fcfb763dc11d03de8a1da3e50f9871be1d1e64e805c7dc14e987e4150f2.elf family_gafgyt -
Gafgyt family
Files
-
28558da23525f76914895bf4497995e6.bin.zip
Password: infected
-
66b79fcfb763dc11d03de8a1da3e50f9871be1d1e64e805c7dc14e987e4150f2.elf.elf linux x86