gafgyt | e1999a446f33992721b9df541f3fe535[.]bin

General

Target
e1999a446f33992721b9df541f3fe535.bin
Size 53KB
Sample240331-cekb6acc86
SHA256 573561a7ae1c5e316831f1702d6ef9f71501ffba7c3a62932668b9de3e6f9ccd
MD5 27f0b3ab647952394b49adb32a86f5ce
SHA1 1e404ff4bc6416896f5ca4064d6d73f8d8c23708
SHA512 d612d43b6324ef4b71597b50cab98d0fdad2375e09b528c6c2e645580a4e3ac0c3673aed06723e8dfa2ac22a3fded0981b0e103223efedee694eb764ab613bb9
SSDEEP 1536:BjMuPL++hXisElGl1Xy+UnZOnYW9bZY0edR+R5a:quPq+osEGiMnZnY0edRC5a
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

upx gafgyt

Family

C2

Detected Gafgyt variant 1 IoCs

resource	yara_rule
static1/unpack001/4e1b008eda17d2c057157e0c6d533d7948729d31e0d76c4cbfc8a565236e4d52.elf	family_gafgyt

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/4e1b008eda17d2c057157e0c6d533d7948729d31e0d76c4cbfc8a565236e4d52.elf	upx

e1999a446f33992721b9df541f3fe535.bin

.zip 53KB
4e1b008eda17d2c057157e0c6d533d7948729d31e0d76c4cbfc8a565236e4d52.elf

.elf 154KB

SHA256 573561a7ae1c5e316831f1702d6ef9f71501ffba7c3a62932668b9de3e6f9ccd
MD5 27f0b3ab647952394b49adb32a86f5ce
SHA1 1e404ff4bc6416896f5ca4064d6d73f8d8c23708
SHA512 d612d43b6324ef4b71597b50cab98d0fdad2375e09b528c6c2e645580a4e3ac0c3673aed06723e8dfa2ac22a3fded0981b0e103223efedee694eb764ab613bb9
SSDEEP 1536:BjMuPL++hXisElGl1Xy+UnZOnYW9bZY0edR+R5a:quPq+osEGiMnZnY0edRC5a
MD5 SHA1 SHA512 SSDEEP

Password

infected