MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 24ba53e0a8f76d2ad5b0c232e462eef6fb3dac167788ff7593d768676d7afdb3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Gafgyt


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 24ba53e0a8f76d2ad5b0c232e462eef6fb3dac167788ff7593d768676d7afdb3
SHA3-384 hash: 3fa73f05038afea20eee68fd4926e154f21b2bd9c3a0ebc68a722106d43aa3b70555b5889232db163de1ffde00900c7e
SHA1 hash: e8b048f38c410c44c7a16688dade0a51115a3f2c
MD5 hash: 55fc0e7ac062e910819aaef68ba6622f
humanhash: double-asparagus-arkansas-batman
File name:55fc0e7ac062e910819aaef68ba6622f
Download: download sample
Signature Gafgyt
File size:866'292 bytes
First seen:2021-06-19 20:59:12 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 12288:XsluE88NLe3IzE19Ycj3NyaTDDQD9ZKII+X16kam8y5P5O4BP9r:UD8OF9cjfTDKzxdb8UPMOPh
TLSH 7C05337EBF809861FDC7D91252388F925B67384F303382963047E0653E2A6A75B6B593
Reporter zbetcheckin
Tags:32 elf gafgyt powerpc

Intelligence


File Origin
# of uploads :
1
# of downloads :
93
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
UNKNOWN
Threat name:
Linux.Trojan.Gafgyt
Status:
Malicious
First seen:
2021-06-19 02:42:00 UTC
AV detection:
8 of 45 (17.78%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Gafgyt

elf 24ba53e0a8f76d2ad5b0c232e462eef6fb3dac167788ff7593d768676d7afdb3

(this sample)

  
Delivery method
Distributed via web download

Comments