Behavioral task
behavioral1
Sample
c8feb9578cb8acdc4ed1193da603998b5e7292b5b0d51ef365a01381709f7e2b.elf
Resource
ubuntu2004-amd64-20240611-en
ubuntu-20.04-amd64
1 signatures
150 seconds
General
-
Target
3ca0dcad18d526519b37bead6d55bc30.bin
-
Size
40KB
-
MD5
1603ae7e5fec655403ca3ad66d4def73
-
SHA1
ba36055c97ec3ebbd2f153fe68d6fa10bf0c09b3
-
SHA256
1476062f9788b2cc02f5ddc6d392f183ff498247f7c73b92ea2f7a11846e880d
-
SHA512
e3877a11e09c708e5cf21bb551b60c49de55950842b3585a346e20270c83834b54a0f0335c39f37dbab64b59c8c2c4e25a94dad674ca8531c8a35881d7270757
-
SSDEEP
768:4ba/FKNBnGU9DtV+VxCMGvo8YDbuBnHUR6/a86dZ/KLr/tqwSy:QjhGkz+PLGRYwHUR6/axdRoIwSy
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
74.48.66.83:23
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/c8feb9578cb8acdc4ed1193da603998b5e7292b5b0d51ef365a01381709f7e2b.elf family_gafgyt -
Gafgyt family
Files
-
3ca0dcad18d526519b37bead6d55bc30.bin.zip
Password: infected
-
c8feb9578cb8acdc4ed1193da603998b5e7292b5b0d51ef365a01381709f7e2b.elf.elf linux x86