gafgyt | 20ac928a32d7259907e93b82c7a9a046[.]bin

General

Target
20ac928a32d7259907e93b82c7a9a046.bin
Size 67KB
Sample240331-bgt4psba2v
SHA256 57e5c44ca33d338d54177becc588ffa4187b5cebf6f870acd72018a57ffc1999
MD5 92fa3e10c83640a1fb46ebba6d77e087
SHA1 a942a5b1a3f63b6697f00f4c3478fa99adc4eca4
SHA512 a4add76e0e5e577dd6fbbe57f311bd2b98471db5c7de6c06960afc30bb189af791aa540af3bd5992865eb77631d68f8217d379bb0353dce17bab28a1b1829401
SSDEEP 1536:XlfpwzCGszl8uWsIMrk1iq4zzKj7MqBpkuK7Cdn:ZpwzfessIMrkn4HKj7MikuKwn
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

upx gafgyt

Family

C2

Detected Gafgyt variant 1 IoCs

resource	yara_rule
static1/unpack001/97cf5198be05d13e85a49e4720b2050f2af110ae775bcd6c180391e8853ecd7f.elf	family_gafgyt

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/97cf5198be05d13e85a49e4720b2050f2af110ae775bcd6c180391e8853ecd7f.elf	upx

20ac928a32d7259907e93b82c7a9a046.bin

.zip 67KB
97cf5198be05d13e85a49e4720b2050f2af110ae775bcd6c180391e8853ecd7f.elf

.elf 162KB

SHA256 57e5c44ca33d338d54177becc588ffa4187b5cebf6f870acd72018a57ffc1999
MD5 92fa3e10c83640a1fb46ebba6d77e087
SHA1 a942a5b1a3f63b6697f00f4c3478fa99adc4eca4
SHA512 a4add76e0e5e577dd6fbbe57f311bd2b98471db5c7de6c06960afc30bb189af791aa540af3bd5992865eb77631d68f8217d379bb0353dce17bab28a1b1829401
SSDEEP 1536:XlfpwzCGszl8uWsIMrk1iq4zzKj7MqBpkuK7Cdn:ZpwzfessIMrkn4HKj7MikuKwn
MD5 SHA1 SHA512 SSDEEP

Password

infected