General

  • Target

    be1d4033854814cd14a69bf8f1cba003.bin

  • Size

    47KB

  • MD5

    fbbf51dcbd22742e8f6a36e043a63d73

  • SHA1

    3b297fd97694d8846c3c686e4bff4c90e1b60292

  • SHA256

    3943cbcbe610b09f62f398de82bff91a21febe5f3c741a5329b925a1d414ee0b

  • SHA512

    7ee2ece668daef33c1fb233fb51eff513bc2156a9aabb9e53da39072457cdccdaa455c206bf60e48f9ea1a067718ad703843979ed9d149c1fcc70a78ee0e0bd6

  • SSDEEP

    768:3SfocFIQK4wfFThIyzZDXjycsb/jfxqB2UtIJAroPCJWHSKbVCBJQqJFjovnS5s6:3KocFds9ThIWZfyl7JU/KeoP6Wy8QJ2m

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

139.177.202.27:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • be1d4033854814cd14a69bf8f1cba003.bin
    .zip

    Password: infected

  • b295c5f4601711e060c6b46a076a5cbb986e25176d5ab6b7a5c25b413e7087d7.elf
    .elf linux x64