Overview

overview

10

Static

static

10

7c4fb66dcf...7a.bin

ubuntu-18.04-amd64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    7c4fb66dcf3636b8900bfe83ae631946249199fda12f04cbc0d098385dd8827a.bin
  • Size 135KB
  • Sample261110-1fkw3sbd59
  • SHA256 7c4fb66dcf3636b8900bfe83ae631946249199fda12f04cbc0d098385dd8827a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
gafgytbotnetdiscoverylinux

Malware Config

Extracted

Family

  • gafgyt

C2

  • 127.0.0.1:9673

Targets

    • Target
      7c4fb66dcf3636b8900bfe83ae631946249199fda12f04cbc0d098385dd8827a.bin
    • Size 135KB
    • SHA256 7c4fb66dcf3636b8900bfe83ae631946249199fda12f04cbc0d098385dd8827a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    discovery

    • Contacts a large (1242091) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks