Categories: Backdoor

What is “Backdoor:Linux/Gafgyt.cg!MTB”?

The Backdoor:Linux/Gafgyt.cg!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Linux/Gafgyt.cg!MTB virus can do?

Injection (inter-process)
Injection with CreateRemoteThread in a remote process
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

How to determine Backdoor:Linux/Gafgyt.cg!MTB?


File Info:
crc32: 7B89EE99md5: b5e6e749331aae9c1bd23d7c6cb10d50name: upload_filesha1: f632a952cad97b8c706090e62590a466f2467d6csha256: f34076dbb195c25419ba258b8bf1f20371daee74dcf9f0ceb7c517ad07fe6b29sha512: 706c613e8ad016802de4d0be5bd9b67d45b7a1f51c0c5180e83d4db691c7e3c5dfbec28bef7362f89f4f4b1068fd0395e52550fcf3c3f20dd72538540d38c259ssdeep: 1536:d51P1I5s+hzXNM5ctDtdphlZenkqwpcmQWFqis/xOePri:p1IBzXN869XZenkbpcmQWFqiYxOuritype: ELF 32-bit MSB  executable, SPARC version 1 (SYSV), statically linked, not stripped
Version Info:
0: [No Data]

Backdoor:Linux/Gafgyt.cg!MTB also known as:

ClamAV	Unix.Trojan.Tsunami-6981155-0
FireEye	Gen:Variant.Trojan.Linux.Gafgyt.5
McAfee	GenericRXMF-EQ!B5E6E749331A
Cyren	E32/Gafgyt.D.gen!Camelot
TrendMicro-HouseCall	Backdoor.Linux.BASHLITE.SMJC10
Kaspersky	HEUR:Backdoor.Linux.Gafgyt.a
BitDefender	Gen:Variant.Trojan.Linux.Gafgyt.5
MicroWorld-eScan	Gen:Variant.Trojan.Linux.Gafgyt.5
Ad-Aware	Gen:Variant.Trojan.Linux.Gafgyt.5
Emsisoft	Gen:Variant.Trojan.Linux.Gafgyt.5 (B)
DrWeb	Linux.BackDoor.Fgt.1445
TrendMicro	Backdoor.Linux.BASHLITE.SMJC10
Ikarus	Trojan.Linux.Gafgyt
GData	Gen:Variant.Trojan.Linux.Gafgyt.5
Microsoft	Backdoor:Linux/Gafgyt.cg!MTB
Arcabit	Trojan.Trojan.Linux.Gafgyt.5
ZoneAlarm	HEUR:Backdoor.Linux.Gafgyt.a
AhnLab-V3	Linux/Gafgyt.Gen28
BitDefenderTheta	Gen:NN.Mirai.34298
ALYac	Gen:Variant.Trojan.Linux.Gafgyt.5
ESET-NOD32	a variant of Linux/Gafgyt.ARN
Rising	Backdoor.Gafgyt!8.56E (TFE:1A:ikoOjeRzYX)
MAX	malware (ai score=87)
Fortinet	ELF/Gafgyt.ARN!tr
AVG	ELF:Mirai-AYX [Trj]