General

  • Target

    252ae2222088f6f04a129cd1f0be6383.bin

  • Size

    45KB

  • MD5

    4bd4fefcf5b21db36184d4aedf9dcf21

  • SHA1

    ae8e38df4958b95d07ce0f134b491f2552e206b7

  • SHA256

    62f1b2757cbbb4711c0f41541991dd17fef5f0584c695f1191f9c20b0402b67f

  • SHA512

    329b2cead48efd753e1d290516af2507830d735d90f65f63703783378e11d57cf44d77cd8d81090830129240f04c63f96eab286f31e18d13143366392e4756d0

  • SSDEEP

    768:hVnyQx9CJerKm0wWiR4UKl/GOIxL5+KFi6P6KGBqN30GnysTCE6ExJiMp5Q02WJv:/nF9CnmFWiRa/GOCDiHKEqNNnlCsXrQg

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.88.66.177:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 252ae2222088f6f04a129cd1f0be6383.bin
    .zip

    Password: infected

  • 3ed568821de0658d8a11a31fd1d75f55910009387c1ab1305a55529b2938544c.elf
    .elf linux ppc