General

  • Target

    jew.arm4.elf

  • Size

    104KB

  • MD5

    5779b93c99baea628b628ce849ef6214

  • SHA1

    47c616dd2523a8dcda8fb451cfc224f9b3893daf

  • SHA256

    1709b02971823ea8c5c5385764b96ef40f02fed09bde331cb7ff69463fc0a454

  • SHA512

    ab7ef20c3db56adde6e9ff05e239db830eb6709416df7b1328f98c788b95f78cd92390caf551e8186009d6f8d4db192381e9ef4cad10b496dde06a5677ba9820

  • SSDEEP

    3072:c/1lxkoWAKnzOv1rsRyffIycy/kJ0s8uX/UWHQlyujA0dP:H/Ryn3cy/I/UWHQlyujA0dP

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.148.10.136:666

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • jew.arm4.elf
    .elf linux arm