Behavioral task
behavioral1
Sample
5e8a40db68a0822e1324e8955c8e9a6417b8153298e4dc6ef4e4e5951aaf3477.elf
Resource
ubuntu2404-amd64-20240523-en
2 signatures
150 seconds
General
-
Target
31f0203b819f3326a06cd5e2219c3fb1.bin
-
Size
41KB
-
MD5
e0d4a7956491f5c668f8443b71a61956
-
SHA1
21d89ac0f87442db56f9fdbb6e79bf73ebd0e9c0
-
SHA256
339c3bd9c7210e97274af775f2e7dce47eb262670555598443ea9f5b6b89baee
-
SHA512
2cebfd830b9c4607ca8162c749a7497a6d71fc304fd3c2fedc7140340f192d5f35681bf3244b077496c18b3801a3d7c740f68a75993ae4905247a846ab7d725e
-
SSDEEP
768:lXuEYGTJxlPhpdxr3p1EmmXDPdwqp1mje5rBlUkEshotooDekwGUM1/PLwKp:5NYSPlDdxF6XDlBUjepBSkvoGoqkwGU+
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
178.215.238.4:606
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/5e8a40db68a0822e1324e8955c8e9a6417b8153298e4dc6ef4e4e5951aaf3477.elf family_gafgyt -
Gafgyt family
Files
-
31f0203b819f3326a06cd5e2219c3fb1.bin.zip
Password: infected
-
5e8a40db68a0822e1324e8955c8e9a6417b8153298e4dc6ef4e4e5951aaf3477.elf.elf linux x64