Behavioral task
behavioral1
Sample
4cafa99c027f975a92fc5ba5c17a625c5e5fa45440165673c69e18b353200764.elf
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
2 signatures
150 seconds
General
-
Target
4679962e0c99acd96f4cff8202be192d.bin
-
Size
45KB
-
MD5
6b932b65fcf3a52e172228d61d8d1cb0
-
SHA1
bc72955acb3379037dc7c10fdd7fe9b24c12c3ab
-
SHA256
1addb1136f8b548d7177d6d909578ec37d2a6919f55fafc19a79fd67569615a8
-
SHA512
83072f5ea7fb8eda3dc376003a66c24742256a66e4ff582a6949d96d78a33d13644dd08239ae8d77f8a8334409236da952544d3a60c7a174242699a93e072413
-
SSDEEP
768:8RnbNOuZP30d8RJLq55/ApkQYAJc2n+vg2OMxwfRjcFQ4NJM6Ce3m4xU1rOPy0A:8RnbNFvHjLq55/MzZZuTjNCe3mG+Wy0A
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
38.58.177.229:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/4cafa99c027f975a92fc5ba5c17a625c5e5fa45440165673c69e18b353200764.elf family_gafgyt -
Gafgyt family
Files
-
4679962e0c99acd96f4cff8202be192d.bin.zip
Password: infected
-
4cafa99c027f975a92fc5ba5c17a625c5e5fa45440165673c69e18b353200764.elf.elf linux x64