MALICIOUS — 04d788870638c10c73140fc9a00cefb7217e1ed6e9ff25468e87e5e3a2cf9c75.elf

Verdict: malicious (100/100) · Family: Gafgyt

File type: elf · SHA-256: 04d788870638c10c73140fc9a00cefb7217e1ed6e9ff25468e87e5e3a2cf9c75

Source: MalwareBazaar · first seen 2026-07-30T00:00:00.000Z · SHA-256 verified

MITRE ATT&CK

YARA

Dynamic analysis (linux)

874 behavior events · 0 ATT&CK techniques · 1 dropped files.

Runtime network

• ntp.ubuntu.com
• fuckme69.duckdns.org
• desktop-hsgcbep._dosvc._tcp.local
• 192.99.16.52:45999
• 166.5.135.53
• 197.29.135.53
• 70.163.134.53
• 1.40.1.12
• 197.187.134.53
• 87.169.116.58
• 156.48.193.12
• 210.82.31.11
• 197.111.178.58
• 79.232.58.60
• 41.138.223.11
• 19.14.230.142
• 197.198.250.10
• 91.113.232.176
• 117.106.124.214
• 75.151.134.162

Analyzed on MalwareAnalyzer by Cyble · Open interactive report