Behavioral task
behavioral1
Sample
950aa8ade3e30e743acf4bca984b407359ae5bd46b192ea1d9cec5ff3eecde1b.elf
Resource
ubuntu1804-amd64-20240508-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
d37377ac1765ee15a893b12a136cc4a8.bin
-
Size
38KB
-
MD5
455812f23fab2806a0b8d25fbda51f8d
-
SHA1
fc2c44fb59e1509155320f0d955ff765b72923fd
-
SHA256
f7c645540b7919ca9d3c869085d0a1abaa002341619bc1b8003c657e88b96bb4
-
SHA512
f1cb1f358e2214d985cff089ba7597664b18b946aa62b639482165c1d247e59234669472bc12725eec267573bdc25ac4ddbe9eadbd1ca534dd99dfc4f806f178
-
SSDEEP
768:8IJYuBAfu1MdE7tqSOTlsAPsHzXWFjo2jUpt1ZFGLD0:8sYuBAf27tjOhs1Gho26tTFGLI
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
188.245.84.178:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/950aa8ade3e30e743acf4bca984b407359ae5bd46b192ea1d9cec5ff3eecde1b.elf family_gafgyt -
Gafgyt family
Files
-
d37377ac1765ee15a893b12a136cc4a8.bin.zip
Password: infected
-
950aa8ade3e30e743acf4bca984b407359ae5bd46b192ea1d9cec5ff3eecde1b.elf.elf linux x86