Resubmissions

02/11/2023, 12:44

231102-pyjk7adh87 10

02/11/2023, 11:20

231102-nfk6maah8v 10

02/11/2023, 08:42

231102-kl49xabf62 10

31/10/2023, 14:30

231031-rvmvjsaa9t 10

General

  • Target

    231010-ynnltsae48_pw_infected.zip

  • Size

    37KB

  • MD5

    d71d2d7aa2460362906b2897aba113e1

  • SHA1

    51c762940630b0ecd2133b6de364f2080069154c

  • SHA256

    46facf4f7f23395bbc1c2c846347ddf7af74c7f3a4cedb78f48d480e6613bcfe

  • SHA512

    da84ca0097885f6ef0034b1a1b397982c3ddeefe5d5079cab329d94dd68024c3d945dce5360f84bfbf7374aed328aeda6faeccbc0693a89fe9150aa48d9c3d45

  • SSDEEP

    768:a+6s06sSlF4slH35faNS2NckRUhPF+Hf9Cv8SzmEVjej/TKoD+zNTXgd:a2vsxslH3V2NQ5FICHzmEgy5TQd

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.14:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 231010-ynnltsae48_pw_infected.zip
    .zip

    Password: infected

  • 7c91585187374dc9640d586463e42af1.elf
    .elf linux x64