gafgyt | 20ac928a32d7259907e93b82c7a9a046[.]elf

General

Target
20ac928a32d7259907e93b82c7a9a046.elf
Size 162KB
Sample240329-kvfmxaec83
SHA256 97cf5198be05d13e85a49e4720b2050f2af110ae775bcd6c180391e8853ecd7f
MD5 20ac928a32d7259907e93b82c7a9a046
SHA1 d63d1860d7cec58ad0ecfde259644c1f94691f95
SHA512 7697bcc693fd60e9c9d8146a2d5561a2e6de288a2b9f04da47dbf0299239a6fa9463626264e16cd91229b43e3bc9d895d05a20f84031dcbe95aa66168b2b5ab7
SSDEEP 3072:EEz42nad2snP1yJShni71cvvK5SXeE2DxVsWmJhny2qAQYzc:znad2sn9yqi7mvvKcXeE2DxVsWmJhnyL
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

upx gafgyt

Family

C2

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

SHA256 97cf5198be05d13e85a49e4720b2050f2af110ae775bcd6c180391e8853ecd7f
MD5 20ac928a32d7259907e93b82c7a9a046
SHA1 d63d1860d7cec58ad0ecfde259644c1f94691f95
SHA512 7697bcc693fd60e9c9d8146a2d5561a2e6de288a2b9f04da47dbf0299239a6fa9463626264e16cd91229b43e3bc9d895d05a20f84031dcbe95aa66168b2b5ab7
SSDEEP 3072:EEz42nad2snP1yJShni71cvvK5SXeE2DxVsWmJhny2qAQYzc:znad2sn9yqi7mvvKcXeE2DxVsWmJhnyL
MD5 SHA1 SHA512 SSDEEP

linux arm

Detected Gafgyt variant
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx