MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f78773d7bebd16215d5b65c3ab4863eba4ced05a0d06430098a9219779e2ebb5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Gafgyt


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f78773d7bebd16215d5b65c3ab4863eba4ced05a0d06430098a9219779e2ebb5
SHA3-384 hash: 9fa0094f4c1020cc20751c0e761b3a38322592987f5d6e8986ab8dcc30148be199d32834eee20cd0ebb7e2b92ffee963
SHA1 hash: 38e591d0c98dab10bc30e0573698178a7e2f020d
MD5 hash: 0b7a2b0f79c7fdaf078279fadd7c68bd
humanhash: timing-snake-oscar-fanta
File name:0b7a2b0f79c7fdaf078279fadd7c68bd
Download: download sample
Signature Gafgyt
Create hunting rule
File size:91'495 bytes
First seen:2020-06-30 07:44:01 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 1536:qwnWN1MnmqUHt85pXafXPkUOHXtp9MX5Fo969uqatMatK0t64POGEgMqc:nnNVUN+pyXPknHdpus9691atx3t64WGA
TLSH 2E934B82E641CAB3E14316F5029F97164132FE3F0A5B9EA6F31C3DF49A355C47221BA9
telfhash 2021f302a5b5865c5ff259649cbc47b51692a2377251be70ef4dc1808c3b002b575ecf
Reporter DeepDeer95
Tags:gafgyt test

Intelligence

File Origin
# of uploads :
1
# of downloads :
89
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Unix.Trojan.Mirai-5607483-0
Create hunting rule

Unix.Trojan.Gafgyt-6981154-0
Create hunting rule

Unix.Trojan.Mirai-6981169-0
Create hunting rule

Unix.Dropper.Mirai-7135945-0
Create hunting rule

Unix.Dropper.Mirai-7139223-0
Create hunting rule

Unix.Trojan.Mirai-7639397-0
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/f78773d7bebd16215d5b65c3ab4863eba4ced05a0d06430098a9219779e2ebb5/
Threat name:
Linux.Trojan.Gafgyt
Create hunting rule
Status:
Malicious
First seen:
2018-11-30 19:24:47 UTC
AV detection:
18 of 29 (62.07%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments