Behavioral task
behavioral1
Sample
d384ad414c37390818d6b83fc035afaa5cf01522d0ea4f1c00fd47ecc0402a0e.elf
Resource
ubuntu2204-amd64-20240611-en
ubuntu-22.04-amd64
1 signatures
150 seconds
General
-
Target
9442244cf1e51ca5cee4ca65afb6165c.bin
-
Size
47KB
-
MD5
c0f74849ca312a757ff28da7d3634731
-
SHA1
d7ab6880c7b50aac1c7a0bfb42f8acfa2622e4ba
-
SHA256
326ef5924d0db2c734919830f2763b7b8a1a4be314c2f03f7094570de2b781ae
-
SHA512
e6751d2720d8b8eadc1c67dd5e5d8b9fa50530400dfa41b6923de2b9ab0a78b663f30a2f989dcb57523fedf80e9cfe0dbd03f3599142002b5f19f28b0f644a7c
-
SSDEEP
768:pXLCsF2JYnzr0DRrkjd5pFooX0oLk6azJbYnLzV/ry+oqECUMS9TeMg2/P7oXUhh:pLHHzr0D6d5pFo9oLUdeVTVzMLg27okv
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.123.85.119:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/d384ad414c37390818d6b83fc035afaa5cf01522d0ea4f1c00fd47ecc0402a0e.elf family_gafgyt -
Gafgyt family
Files
-
9442244cf1e51ca5cee4ca65afb6165c.bin.zip
Password: infected
-
d384ad414c37390818d6b83fc035afaa5cf01522d0ea4f1c00fd47ecc0402a0e.elf.elf linux x64