General

  • Target

    38d1ca637046ea9c2b037a612ca27265.bin

  • Size

    47KB

  • MD5

    9d397f73d772043981a3ba41127cc5e0

  • SHA1

    a42462124d56e6d98d2cb69fc8c9abbb45f548f1

  • SHA256

    b2d27b00237635e59ffb1f513803ce3ed0f2b28a81ead2086fefcbe1c6b46fbd

  • SHA512

    086ab840f2479f6fa29dba9a770ed6daa978f64a8dcc065730a512377b3c004e4b49cf85da3a568fbfac4d93f6515b0eac8ff74ad806590cf623b275d9abfa8b

  • SSDEEP

    768:VRRIF4/ihXTMH5JDfgYyB+5ZzRxdHN6LkoffOG1ICsrhHHbMjBP:V4FjMH5Jjzn5ZFHNUkofziCsrlHbQBP

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

139.177.202.27:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 38d1ca637046ea9c2b037a612ca27265.bin
    .zip

    Password: infected

  • 4ea3e862a706bd17b47f6d7bf7d58297308ca69399822d4f80bf329e1307c3e2.elf
    .elf linux sparc