General

  • Target

    7298e80f099dde9db20b0be02971b325.bin

  • Size

    50KB

  • MD5

    3a796c2e48730fbd70de1042d97dc441

  • SHA1

    d31dbef6ea0e4a1419062ec93e0d5b3529288f8c

  • SHA256

    a89caef45b791bc764797a937458ecfaa75b7b58a168e8a53b4cb2798e7734e6

  • SHA512

    9eaf887644e0f309c39d0fdc8d9c2b03c2ee99c7fe107d00ac66a5fc0d0591bb7c1435d2d3bf70d5d06c9e88b902124c0a3dacf671b1cfe8d9e689947dbee1ad

  • SSDEEP

    768:oHHfqink0LReU0WwKysral3iLiciw9goG7J3XIkMg0U6tHZXgSvA5EmR:onSPOMWwRS3Z0IkhkTXy5EmR

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

2.57.122.129:8889

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 7298e80f099dde9db20b0be02971b325.bin
    .zip

    Password: infected

  • 4387c1be9255ee394e49a49f2f302d3e0def1b397f3b3515abeb2c88858ae506.elf
    .elf linux mipsbe