General

  • Target

    392e82d183580b68874c810823db0663.bin

  • Size

    52KB

  • MD5

    11a10f5183b159ed1cd70bec97f3fecb

  • SHA1

    1c8b358107663698fb0301c2b69c1727b584664c

  • SHA256

    bd20cada23b8c2826e1d648a4378e50431b861ab0417d062289f668d0bd038a1

  • SHA512

    a3f8d33e66287867e0f897ad1b4eca8a7e0e2f821c78c6080e8ce1c4fb697086a5c9693a6665e2a018e37bc00f73d28dfc46f6fdbb4dcd4dc194d70191e37068

  • SSDEEP

    1536:YTAV2Xa0yhNc4lWkgiXSH1cmj0gDg1eRdq9XqDDi:dV2zyPkiXK9jWSdqmDi

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

91.234.99.218:71

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 392e82d183580b68874c810823db0663.bin
    .zip

    Password: infected

  • 55763357d962bfcf39f59658fe3200ed7d1cd5ff81c5ec8df0cf5272a76f2796.elf
    .elf linux mipsbe