Behavioral task
behavioral1
Sample
b267730fde9e71436db6e64fa2702e7419bee6dbc507246ed51c0f70a7438543.elf
Resource
ubuntu2204-amd64-20240522.1-en
ubuntu-22.04-amd64
1 signatures
150 seconds
General
-
Target
0e0f261f5de3c73d794cc1a38011c410.bin
-
Size
43KB
-
MD5
da005dc588ce6f6445dca3e6fb10a80c
-
SHA1
147aa28ee08beff42a15da4941409598c7b43179
-
SHA256
d5dc10d3c6b824cc66ef777ba66c0e763214dd07692d46a676e367d67adb87a7
-
SHA512
a429a6412f6479cbbdf6c883adfbcaf909485f74d163f1974d8ca163036835683e52c6c027de879457e3529c14aaed0f7712000160f13dc9c7b6b5a00aa0d713
-
SSDEEP
768:9DgLBAROynZva2Nhbq9eOM3VVbwgTu3C4GF9kkBLfVHU8Nld4eF8q:paAEgvWy33bRCy4vkBLfV0KHNz
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
74.48.66.83:23
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/b267730fde9e71436db6e64fa2702e7419bee6dbc507246ed51c0f70a7438543.elf family_gafgyt -
Gafgyt family
Files
-
0e0f261f5de3c73d794cc1a38011c410.bin.zip
Password: infected
-
b267730fde9e71436db6e64fa2702e7419bee6dbc507246ed51c0f70a7438543.elf.elf linux x64