General

  • Target

    ftp.elf

  • Size

    122KB

  • MD5

    270db6d9ec2e98723e77c9cc1da8154d

  • SHA1

    4904a9979cb730752cec236ad3a54e1201929cc8

  • SHA256

    f1e1a8e29d30638d02d94d939243694692a2cd46b8e8bc95502d4e26daea3a1b

  • SHA512

    c5fdd4cf8ff374e0e046f1950dadf05bb3809200b1ae298a6d8e8a2705b9a3d2749a4ad00975fad342f402d2512e3366c370cd96a7edee486a5ca73463c2c449

  • SSDEEP

    3072:9QGMZwVPU4u4vM9+NSyetJ8add9QzTssznt4NKcXeGcgqGK:90qMEUSSyetJ8addQtnt4NKcXdcgqGK

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.115.172.234:6667

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • ftp.elf
    .elf linux x86