gafgyt | b3082b54883b4590a4e701bf979d56e7[.]bin

General

Target
b3082b54883b4590a4e701bf979d56e7.bin
Size 46KB
Sample240331-b689xscb44
SHA256 e6af3e458d003e3199a4fd998fe5971c79c003b770d7bbd50b4f013bd717b830
MD5 1a85656933b8fab16c2e11335334a3da
SHA1 ce0a7270b0061503f863eba97cd8e8816c4be66b
SHA512 f7d06d79125f3bf887d11c8a66003ffcd8d5cd61436706cd429a6182b6da7a06bc26917cacce40fbb748583c8b85ddd406bdb02def45e077592840cc9c225939
SSDEEP 768:OV4QL+5y22Q69cIABXOIfopEHgqltTlxznKzCGuO07oiVC3F4bTDM9:Oc5y22D9cjBXffAET9XznTGuO0M8+Fv
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

upx gafgyt

Family

C2

Detected Gafgyt variant 1 IoCs

resource	yara_rule
static1/unpack001/92a2f830bae3bd28bf3374314b2e4f0162d82bd4f14cbc1c54d4a19117d2a45d.elf	family_gafgyt

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/92a2f830bae3bd28bf3374314b2e4f0162d82bd4f14cbc1c54d4a19117d2a45d.elf	upx

b3082b54883b4590a4e701bf979d56e7.bin

.zip 46KB
92a2f830bae3bd28bf3374314b2e4f0162d82bd4f14cbc1c54d4a19117d2a45d.elf

.elf 121KB

SHA256 e6af3e458d003e3199a4fd998fe5971c79c003b770d7bbd50b4f013bd717b830
MD5 1a85656933b8fab16c2e11335334a3da
SHA1 ce0a7270b0061503f863eba97cd8e8816c4be66b
SHA512 f7d06d79125f3bf887d11c8a66003ffcd8d5cd61436706cd429a6182b6da7a06bc26917cacce40fbb748583c8b85ddd406bdb02def45e077592840cc9c225939
SSDEEP 768:OV4QL+5y22Q69cIABXOIfopEHgqltTlxznKzCGuO07oiVC3F4bTDM9:Oc5y22D9cjBXffAET9XznTGuO0M8+Fv
MD5 SHA1 SHA512 SSDEEP

Password

infected