Behavioral task
behavioral1
Sample
ed973f3ce73261807f83a57e914e128261ea38507f17cc3b28910de8b288f574.elf
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
1 signatures
150 seconds
General
-
Target
40e12ebf6b877bb31453ff6afab29641.bin
-
Size
40KB
-
MD5
2535f39da5f8fe5755db6f116c0dbf28
-
SHA1
727a0069f6152a8a576eb60e97b41b7da211e701
-
SHA256
337d43ebc7e0d0ab01c814767a08e0ef698473760a0618deac778c5094b5bf00
-
SHA512
60adebbe9850967c3de6c232e661e4f68a148f3b7c28e530003f5191a2f2ed465c03557804266099cbfc690f55010feb185c126d504fd08cb3275c07870a4f14
-
SSDEEP
768:VcafU+DfsH6kHbanoeJu2pPUo0m2agXmMWU5PSMqIOn/ps+6fZHeD5BfxM8:VtHYaoe1p7M2lUpSMIn/psZHH8
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
74.48.66.83:23
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/ed973f3ce73261807f83a57e914e128261ea38507f17cc3b28910de8b288f574.elf family_gafgyt -
Gafgyt family
Files
-
40e12ebf6b877bb31453ff6afab29641.bin.zip
Password: infected
-
ed973f3ce73261807f83a57e914e128261ea38507f17cc3b28910de8b288f574.elf.elf linux x86