gafgyt | fuckjewishpeople[.]x86[.]elf | Triage

Sharing

General

Target

fuckjewishpeople.x86.elf
Size

91KB
MD5

4544b40ca36171545258a459a4f7998b
SHA1

d069d8e49e403d7b4bb825f761bc71bd8403ca2f
SHA256

3441b0320fe7ff51f243a71250ec19502a2a2cc7d4ca41247483c791be61d1f1
SHA512

7bf4ae37e2119c8f9e45134ae465a87d33840f94c863928da4bb9899c596d66ea78225127f0bcd16aaa806eba8aaac2b4a6d8ddf4232357c269f358d826ec81b
SSDEEP

1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3QphauH/VPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGdQphaE/XVog99um2XFY

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

5.249.162.136:4258

Signatures

Detected Gafgyt variant 1 IoCs

Processes:

resource yara_rule

sample family_gafgyt
Gafgyt family
gafgyt

Files

fuckjewishpeople.x86.elf
.elf linux x64