gafgyt | jew[.]ppc[.]elf | Triage

Sharing

General

Target

jew.ppc.elf
Size

111KB
MD5

03ecd825a645257eae557c815d177748
SHA1

28903c371efc9e322466f4f9e1f445bb7f4594b2
SHA256

217e9be37888e8f1dfc24258133d14486f687930249ee2cdb22ac0ab07a3f04e
SHA512

281458debe56982ce0d1178f814b9c6bd52c4d536c17e45ed8140c15ec3527fcefeab2131a7eae9030917d296a153309a0699a4500518bac22125b30011f9fa9
SSDEEP

3072:o/1lxkoWAKnzOv6rDdVx549UJ5/GMB4b41qr/vBUQR6zAAgXP:zldVkUJ5/Geg/vBUQR6zAAgXP

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

45.148.10.136:666

Signatures

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

Gafgyt family
gafgyt

Files

jew.ppc.elf
.elf linux arm