Behavioral task
behavioral1
Sample
9fc7bce13b8afb1205dd6b44be6ab47a7bd13bb0bdbe977c920a1acadf1f5173.elf
Resource
ubuntu1804-amd64-20240508-en
2 signatures
150 seconds
General
-
Target
1975085e9704931af1218ab024205e31.bin
-
Size
47KB
-
MD5
5cdda51291a8203765b2842d717dce88
-
SHA1
60deefd167df124baca9895788c41ce9910a9622
-
SHA256
7359f95c400d5f050776a42d0bcbc054d8993cd599b38c4c5f344bb2502ed369
-
SHA512
e2b7cb85224d4e8bb66df894f9aee54295cd448ad90235b5e8f5e9cb0f558f2a191dc1c118b963078b43bee5a251b2aad44a1afcd74b52a6c8eae90b07b57876
-
SSDEEP
768:mzzbq3N4Vv69WkjWZ6qd7rEDE+92Qro8aML3JQSZP8Tqm2w8x9vPO6nh0x:mnbqd4d4yUQrEDmQbaML3JXP8Tqm2w8+
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
103.153.69.150:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/9fc7bce13b8afb1205dd6b44be6ab47a7bd13bb0bdbe977c920a1acadf1f5173.elf family_gafgyt -
Gafgyt family
Files
-
1975085e9704931af1218ab024205e31.bin.zip
Password: infected
-
9fc7bce13b8afb1205dd6b44be6ab47a7bd13bb0bdbe977c920a1acadf1f5173.elf.elf linux x64