General

  • Target

    76c92abebb2c428ec42ddb539d0bbddf.bin

  • Size

    43KB

  • MD5

    8507b81fc3bb0906a1b26b1674d6999e

  • SHA1

    93b2052691ce8f0051187a29762f4cb2cfac5b83

  • SHA256

    a15b99eddd9b2373cbea289151d62ff3d8f33259649fb73438dbd22acace28e3

  • SHA512

    ce37c3567bb13c7e48f291e4a58399fd802c494b75829afc5c5033571be0a74ed7297ea9ea98b45ab8c0f89e91f9106f3acf00a2c2507075bc99354e740b4ca7

  • SSDEEP

    768:ZFmUPtd+/lMMgMMx77rhkiTKy9Z9jkh75JQv5l3f7UJ5CNn+Hc89:ZFmUPt0+nMMxHhki+y9Z9e2/3f7+CNPG

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.88.66.177:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 76c92abebb2c428ec42ddb539d0bbddf.bin
    .zip

    Password: infected

  • 44885431a45d3f867466c22a081ab4711102f919c9e40cc508f9892c5009857c.elf
    .elf linux x86