General

  • Target

    d7c38dcf486229b9755993f35a0840e0.bin

  • Size

    50KB

  • MD5

    d1f0f9bbabe1d97d4a764f4552f49995

  • SHA1

    051e1c2d39c0142ab1f2c6c01b62acce2fb4fcdd

  • SHA256

    fadfeae9d7c1c174cc7baf04658fa0cfe96a9775d51ceb82f870588338dd9e8c

  • SHA512

    85ae17ced249cecb6d5fa38f7d0da387ba766c2a9e90957d385e0246548d31797a1d5b784cc041b03bfbd95e092c2570522f77a764d904d40bfbc9ab514b0118

  • SSDEEP

    1536:kLhw9rD6FgYxQwVJLBpHYn97oaaXCFJWbRt4pOCfXVuESI:dwF8EBp4n971F6PUNtv

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

2.57.122.129:8889

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • d7c38dcf486229b9755993f35a0840e0.bin
    .zip

    Password: infected

  • 1075b1c6fbb36dbe94c275d43c4037e857187f7d0af3fd600e7194db5bb20f53.elf
    .elf linux mipsel