gafgyt | ea27ee20e6abd5b35052df0741c6d11c[.]bin

General

Target
ea27ee20e6abd5b35052df0741c6d11c.bin
Size 45KB
Sample240408-ce42kade71
SHA256 13365d9607d74e47d7aeb7a80f28e0072d919137c14d3f871883d02ab19b23cc
MD5 308ef741e1c4ce08f98aa7489ba10403
SHA1 268f4a5be08f634a5f1a29d67ba517374f747b7d
SHA512 cfe4577106b144b2a8f006ecffe56f7caecf77723b954c4e70c10825cf255c8187598fb82f007e75d924c79d4a72a0f08118639e449ab672079b7f867600c7f3
SSDEEP 768:/86RRtXmAC6+nJP1TkBjgG78UqzY7TnbhvCHzhJ2OV163fvrvebqI8XP7EQtDxmt:/vRR90VnJtTg7v40TtvAT2U1gbecBi3d
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

gafgyt

Family

C2

Detected Gafgyt variant 1 IoCs

resource	yara_rule
static1/unpack001/4711cbdb3efc2d6b996d59e67cd3eab9ae9ec689236f0f17139702ca120fa266.elf	family_gafgyt

ea27ee20e6abd5b35052df0741c6d11c.bin

.zip 45KB
4711cbdb3efc2d6b996d59e67cd3eab9ae9ec689236f0f17139702ca120fa266.elf

.elf 140KB

SHA256 13365d9607d74e47d7aeb7a80f28e0072d919137c14d3f871883d02ab19b23cc
MD5 308ef741e1c4ce08f98aa7489ba10403
SHA1 268f4a5be08f634a5f1a29d67ba517374f747b7d
SHA512 cfe4577106b144b2a8f006ecffe56f7caecf77723b954c4e70c10825cf255c8187598fb82f007e75d924c79d4a72a0f08118639e449ab672079b7f867600c7f3
SSDEEP 768:/86RRtXmAC6+nJP1TkBjgG78UqzY7TnbhvCHzhJ2OV163fvrvebqI8XP7EQtDxmt:/vRR90VnJtTg7v40TtvAT2U1gbecBi3d
MD5 SHA1 SHA512 SSDEEP

Password

infected