Behavioral task
behavioral1
Sample
a2d22be0752cfaae01a4227f4397033e38cc7d903c716458b54f01c811f67ba5.elf
Resource
ubuntu2004-amd64-20241127-en
ubuntu-20.04-amd64
2 signatures
150 seconds
General
-
Target
754bf7dba3e5467a150b5bbe601f2f89.bin
-
Size
41KB
-
MD5
66d802810232e2706e352e094083d9eb
-
SHA1
71ed78226473456e5fa871ba2e8b54b9e802613c
-
SHA256
663a94d4f96c9ddf0c40a6f860dc75988e820124d17921d6cac2d8fbbdfb4ee9
-
SHA512
c35bc039cce65a833731bf8b3b685a7db6399bc9177db80b20cb01c3167a40f3e43e53bcee9e38c6f5225a8314ae5abbc568cf6e166e84d0d35adf38f20fc256
-
SSDEEP
768:IDntlA6HCj8RftobueguYlA8Cxhg5XMRbdXv7MkapQ/MjLk95qy7ve+hrf9HDJNh:IDrviooaeguuBIhgBMRbdj0ScY95HF3b
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
195.201.59.165:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/a2d22be0752cfaae01a4227f4397033e38cc7d903c716458b54f01c811f67ba5.elf family_gafgyt -
Gafgyt family
Files
-
754bf7dba3e5467a150b5bbe601f2f89.bin.zip
Password: infected
-
a2d22be0752cfaae01a4227f4397033e38cc7d903c716458b54f01c811f67ba5.elf.elf linux x64