General

  • Target

    04652bab6e2b0d35ace4fdaacb8e64bc.bin

  • Size

    45KB

  • MD5

    f3d798e5535c8f1afc5b57aaadc18c79

  • SHA1

    8e072dab704d04c4099bad7261860499e4629752

  • SHA256

    e2619685741e73cd6f882df16ed154a85e8aa99203383414647757a4e1402cb2

  • SHA512

    9ec249dda391e06768fc0228d60b710a27dc17951f1432ac7b3ea92537a902d40a2e9ae6e4082cd6c7bc0a8cb20d76fabe88067a2994c20044bd2838abe95b3d

  • SSDEEP

    768:XJMeopZepvr7AztzfcOoSqgQW8jBEaAUJ3FNZfFfL2eKyiLsLYfRsr9S9iA4/+EI:JeZawztr5qnPjiknzfFfL2IgRAS0I

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

139.177.202.27:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 04652bab6e2b0d35ace4fdaacb8e64bc.bin
    .zip

    Password: infected

  • 6a21f0dbc386c1f6300694ffdd2051e4680a52cec66e9d789445fa8a30329db1.elf
    .elf linux ppc