Resubmissions

31-10-2023 14:24

231031-rqzcsaca42 10

31-10-2023 14:13

231031-rjqgashg5w 10

General

  • Target

    231010-ynnltsae48_pw_infected.zip

  • Size

    37KB

  • MD5

    d71d2d7aa2460362906b2897aba113e1

  • SHA1

    51c762940630b0ecd2133b6de364f2080069154c

  • SHA256

    46facf4f7f23395bbc1c2c846347ddf7af74c7f3a4cedb78f48d480e6613bcfe

  • SHA512

    da84ca0097885f6ef0034b1a1b397982c3ddeefe5d5079cab329d94dd68024c3d945dce5360f84bfbf7374aed328aeda6faeccbc0693a89fe9150aa48d9c3d45

  • SSDEEP

    768:a+6s06sSlF4slH35faNS2NckRUhPF+Hf9Cv8SzmEVjej/TKoD+zNTXgd:a2vsxslH3V2NQ5FICHzmEgy5TQd

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.14:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 231010-ynnltsae48_pw_infected.zip
    .zip

    Password: infected

  • 7c91585187374dc9640d586463e42af1.elf
    .elf linux x64