General

  • Target

    fb108a4ee4db64b54afbce3d35a9cae5.bin

  • Size

    47KB

  • MD5

    c27255eb80ecc6cf09d2d4e77a67af74

  • SHA1

    855aa775e7e3d2e6508d3eb481f0f2dd54a51918

  • SHA256

    d9f980b3c885fb980f6f14bd3ab4dc20608b32cb0b71116441dcb597cc201be1

  • SHA512

    4768bc069f36e9b91bc1e5907b7913310e961c7349f96d062b72b0642ea42ded7fa97e2243ffe8f832ceddae1f353ad454025d761eac82ae67a9aed7caf99769

  • SSDEEP

    768:QhEj3ZXrMiSd6jQHCEYTBRuZML3tBGoeSyY8j80T9pklEETKpFR/wPJLj:SEbZXrxSI4CEYdRYSXGZS6j805pkmZ7A

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

139.59.156.65:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • fb108a4ee4db64b54afbce3d35a9cae5.bin
    .zip

    Password: infected

  • 528a6ae2ead17905754a0724a1ebe9d03277dbe0ecb6faecc7967ef47f3d43ae.elf
    .elf linux x64