Behavioral task
behavioral1
Sample
40be8bf94e11a94e5a62f0387797526f442dc1439cb78973e3a9587a4b8f578c.elf
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
2 signatures
150 seconds
General
-
Target
35999e211f37f044baef609e8de052b0.bin
-
Size
41KB
-
MD5
7ed89e898a9c4940c85f1b7123a9e9e6
-
SHA1
e2db3d13c94004bbfbe8339894f0fbca611f3f65
-
SHA256
4170ff93b2c37cb14388fe410ebb40c5247e13887a5ad89b7b580ee886f98c2d
-
SHA512
4d3d8f74fde2cb1571448d4f6549d69313cbf78af2d7a67ef09c68424823dd8ad86b2428d50d4693bb3f07e33beb494dd0f458c49fad14283bff666966034b39
-
SSDEEP
768:xeiiMwK/t4A/EufAQGvrIO59gW8LPyqA8ZC4tHYx6rBD9nfxO9+:AJy/6A/EjDIO5T8mnoHeOFxOw
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
188.245.84.178:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/40be8bf94e11a94e5a62f0387797526f442dc1439cb78973e3a9587a4b8f578c.elf family_gafgyt -
Gafgyt family
Files
-
35999e211f37f044baef609e8de052b0.bin.zip
Password: infected
-
40be8bf94e11a94e5a62f0387797526f442dc1439cb78973e3a9587a4b8f578c.elf.elf linux x64