gafgyt | skid[.]x86[.]elf | Triage

Sharing

General

Target

skid.x86.elf
Size

90KB
MD5

3500258693165311b6889ab65352c793
SHA1

7c23fc6593989bf5c7d3fce38e6ab63f20ab2eb2
SHA256

6a042cc68c2047edbd43fd020352b898fd431eba4ec6cab03f9e5029827638b1
SHA512

a18a3de275d1db1ace39cbe6acb86f32775b077db8fde2122b2d973f56f38d9b51e790d6e88652773aaffedd5fe9a63e2e1d6caca22b768cd352179bbd327b78
SSDEEP

1536:W7WREyqkQc923v2uNi7pNF+BoD30phanvn00GFmoI5um2Xj5YZA0e:4RkQT3v9EbYBo70phanvn000mr5um2Xx

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

157.230.247.140:168

Signatures

Detected Gafgyt variant 1 IoCs

Processes:

resource yara_rule

sample family_gafgyt
Gafgyt family
gafgyt

Files

skid.x86.elf
.elf linux x64