General

  • Target

    580b6690e62436d274dea7db581284a4.bin

  • Size

    47KB

  • MD5

    1c47cbd2f531578b8ba7e4f511426b1a

  • SHA1

    31b7c112e40917665c54cbe355bba5096e646b32

  • SHA256

    5c6320b08a23656e5a90bc6aaea2819002c715d95807a91af1f19760fcb57be3

  • SHA512

    57aab0c7ee8189abd0214126efdfbfb8295644c1a17063da7fb34982a8b1d8fd162ca805c6c84f3b5c75e49bdafb5a5f8401dc7fc7e34e17fcddeae332e99d15

  • SSDEEP

    768:LR8DlH8irnMBTcE01t+yO3FEDAWDkWngj3lci2PA1iS2Mg7iBMqLdaJPWDL1rKwP:CxPrnecbt+tFEDRgWnMl6qiV970LdaJu

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.88.66.177:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 580b6690e62436d274dea7db581284a4.bin
    .zip

    Password: infected

  • 83f31acb3715d3b70b5714ce80c1f6f44208ea1bc1adc1e97e768c1147c2f6a4.elf
    .elf linux arm