Behavioral task
behavioral1
Sample
4c8012d84360445126c4336f3924fb0bbe48d727d34c19b981b274c02b5b66c2.elf
Resource
ubuntu1804-amd64-20240226-en
2 signatures
150 seconds
General
-
Target
f0daf4622e81bbd5b83d0eecc189ee2c.bin
-
Size
44KB
-
MD5
2b6aa5e498e7b9cf211eb5d341d88c24
-
SHA1
92c85928dbbcacfda43a13ef334d33f48a8090d3
-
SHA256
dd1961f46de50aa58547666176d09b14589445e56b9d527105544e2039d93fc6
-
SHA512
708247370ec70f3e1751a11fd4fd24dc5e8d4017916326a292c967eed61a725b01d6f25a9a8aacb9f5f2b9f631b69a676c0f6f1a1846c3e4a08a0971e9621f3a
-
SSDEEP
768:C9ERKJI4yv8F8Qewq2Iz/9veaGCNgXUY6yzWQnTrvVgvZIWcfyHYTX8C3OhJzk:C9E8JCvzQezAaGcgX3Llnn6vZIgY78al
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
5.253.246.39:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/4c8012d84360445126c4336f3924fb0bbe48d727d34c19b981b274c02b5b66c2.elf family_gafgyt -
Gafgyt family
Files
-
f0daf4622e81bbd5b83d0eecc189ee2c.bin.zip
Password: infected
-
4c8012d84360445126c4336f3924fb0bbe48d727d34c19b981b274c02b5b66c2.elf.elf linux x64