Behavioral task
behavioral1
Sample
7a6489e4a5b25915b47b204aecc3afb0e3f51f6f33059e8333b8e0300b4ca2a1.elf
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
1 signatures
150 seconds
General
-
Target
0edc673eda0ed6fc89b1a1dc8de894be.bin
-
Size
38KB
-
MD5
474478d6a33f04cedd258e8e03103d19
-
SHA1
9dbce79aceef3e58a2fff2ecbd7042954b91cd8e
-
SHA256
88efbb7549ff764417f3bab06b885e75e44f639306f754ee67d41627c615e256
-
SHA512
0d50452661fbb5a43985f8f17bc13ef89fad9ed7113e03ea292d1154c7b2931a7fee7f6a7857d4e0ee9b1b23a2607e54bd11f841184d2d8cb76e3218d1fef24a
-
SSDEEP
768:AubnRs2wrfP78svCASdrtA71K6HgKRETSxWpng3A3qVkNGPvO9I3yrH2cLUk:Aus578RjrtABK6H1EOxWgA3qSNMW9I32
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.123.85.251:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/7a6489e4a5b25915b47b204aecc3afb0e3f51f6f33059e8333b8e0300b4ca2a1.elf family_gafgyt -
Gafgyt family
Files
-
0edc673eda0ed6fc89b1a1dc8de894be.bin.zip
Password: infected
-
7a6489e4a5b25915b47b204aecc3afb0e3f51f6f33059e8333b8e0300b4ca2a1.elf.elf linux x86