General

  • Target

    fc9fe3284b937e59c1a64618890a70a6.bin

  • Size

    42KB

  • MD5

    919844738b6bddd2d4840998fd368195

  • SHA1

    3b306dc7ce8d3d2a3a609d81a8921ab0f8e96774

  • SHA256

    afce14a739607fc8d161c6b0dd09d5e34db7acce6987aa6070b163d8c75f6b12

  • SHA512

    e78b4c929107e0c60308a730af3f780c032e650d68918f393eeb3a0578b4c052c46713863cd25c88d0f3d6447cb0e8819aff0d4cc2adbdba0d7b2dcf280e4df4

  • SSDEEP

    768:XWFlU5ACj8bAPdSGm40l1A5OZsKZINET/qTJnMAe1Nw4XRe3IDTffQssp7kwspe:elU5ACvPdVm4y1T7ZsT518Nwoe3IDTA1

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

198.98.62.168:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • fc9fe3284b937e59c1a64618890a70a6.bin
    .zip

    Password: infected

  • a03a7b6720fd1b3aeaa46c68cebe5f02c09237a2cccb2d3782464da710db0bd8.elf
    .elf linux x86