Behavioral task
behavioral1
Sample
11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0.elf
Resource
ubuntu2204-amd64-20240611-en
ubuntu-22.04-amd64
2 signatures
150 seconds
General
-
Target
c5f57160a1e62fedc1906e8f080d94f0.bin
-
Size
41KB
-
MD5
55301fcdf3d041d8ee2c347f1b663055
-
SHA1
90c6938b853e510b6c89d339d640235fc78c3100
-
SHA256
7fd2556484237ebe9ee6bc57119cf0c8831eb9349b242a7aa74bf784aa17512b
-
SHA512
ab07b81a0112aac974126b3cd3a10f19f28c150ab2a705ebf1d7a3783e7d4744cc2da452a94df00bb8e938f73be6b20c745ca29b78db1a727b8fdc4fa4579cbd
-
SSDEEP
768:WyKZwP8Td+W/QyOnku0Xnm1FXZB/dJBa7hMGog64lGBdVKSZbDQijb:iwAd+W/FOnBeYFp/EWgVkBdHFQiv
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
154.213.187.62:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0.elf family_gafgyt -
Gafgyt family
Files
-
c5f57160a1e62fedc1906e8f080d94f0.bin.zip
Password: infected
-
11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0.elf.elf linux x64