Behavioral task
behavioral1
Sample
aad6878d2aa36a8eb4f95279b6ffea26d83b53df9e27f921b83a986a819d041e.elf
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
2 signatures
150 seconds
General
-
Target
589d6374c72c1721be71a3a5e3de4a09.bin
-
Size
45KB
-
MD5
98687c49666c4a857b0f88d8c24b952f
-
SHA1
e55eff8025db0963b81374dde2452cce63316199
-
SHA256
572ce3387b3bac7074c9556bd7338f43928e806c766a7b7280756bbb8bd32b85
-
SHA512
033a26957ee866a479b72f6d1e8647c29a0056c642a2e419958f736bd13a4d248960b2a1b56de8f6b4084618f7355215878a4c00e746396577c875ddfac102e2
-
SSDEEP
768:42L57ElRnB1WaIXl+IpdeKZBIUx8DZIAx7NtH5m09OQwZtEAtR/x/QQ:SehXJTeKZpxEzxO09O5ZtZT
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.216.71.152:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/aad6878d2aa36a8eb4f95279b6ffea26d83b53df9e27f921b83a986a819d041e.elf family_gafgyt -
Gafgyt family
Files
-
589d6374c72c1721be71a3a5e3de4a09.bin.zip
Password: infected
-
aad6878d2aa36a8eb4f95279b6ffea26d83b53df9e27f921b83a986a819d041e.elf.elf linux x64