General

  • Target

    36a0bb87f0abfc58e47ce70dc13925b5.bin

  • Size

    51KB

  • MD5

    b890971e98258a125b626f82b761fe59

  • SHA1

    a5bb9eff02103a983651575473b6fa72c1ae154b

  • SHA256

    701520294f2ee96ca6821dfe03507a659d41e1cd5caca127a62353af36c665c6

  • SHA512

    6c2e024a932d7ecb481b6b41124b28a29b01f0d6271138b45f9bbe4f5537910ecf10520d2fbde7f9a1d490c342f02f6efa668138a2a8617977ddcf4141eb5b3a

  • SSDEEP

    768:sARtZyFUDb9CIAurM7QiFHWpXZQn78q51yJ1Xl0o2Ht1BpSc:tv9C4W7FHW3Q7haJ1VD8yc

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

178.218.146.89:12345

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 36a0bb87f0abfc58e47ce70dc13925b5.bin
    .zip

    Password: infected

  • 35e1beeade1ac1afcbe75b64a08796456cbd7bdce8ecf5bd817cf3e81a5bab0b.elf
    .elf linux arm