gafgyt | 7289e2779d277b2bf623d3879598d525[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7289e2779d277b2bf623d3879598d525.bin
Size

65KB
MD5

6f71aaa729eb0b6fd21435c996aedfe8
SHA1

6733b0ba60994e3bb2390e9774d7219329705971
SHA256

9422747eeeb00d366d2330e6bcdc61ab37db1e81ceb5baded5898a75e4066381
SHA512

2cb0064c309fa0a2fb03864a0c0f9f7ce5f3a7f64729567a32f9d1ec2bb05cde1125f47a68d289b40a0b3ef48bff16e22f782c090a250b8319d80cd47e82550f
SSDEEP

1536:TInytxVcnZOHyi5PrgZgIOlcYyl/9ZKBgI:TI2coSi5DYgVcYu/jKiI

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

101.99.91.77:812

Signatures

Detected Gafgyt variant 1 IoCs

resource	yara_rule
static1/unpack001/aca1bdfa6c84f89a79cee73dbf8dcdf55b8fd0342c90793d624f062328670286.elf	family_gafgyt

Gafgyt family
gafgyt

Files

7289e2779d277b2bf623d3879598d525.bin
.zip

Password: infected
aca1bdfa6c84f89a79cee73dbf8dcdf55b8fd0342c90793d624f062328670286.elf
.elf linux arm