General

  • Target

    e016ffa8b01c128f34e3b746034609ed.bin

  • Size

    45KB

  • MD5

    f28ff031769fd15d222b05864eff36df

  • SHA1

    b35bdc87e28b20287a337955818a8f61365c1361

  • SHA256

    3f4c532361120f657207715c8eccba6e62f4a45f22bddf2a905b920e89d0834d

  • SHA512

    4a07d9856f1ecac31ff111148509aaa510bd6ff5edf60aa73f7a2479ad911d268b5b7534c091cf226a6b60d53046dc1d44a3b48ba7a6001ad2758b7151085a74

  • SSDEEP

    768:pxuPt0I5WjaXupUjhuy3jNW3IkmUULcTjlX7Pz0tDUHjpNmxZVEPGwuK9pA8:pxulF5Wjqupkhb3j+pmNmjpn0ujpNgm9

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

178.218.146.89:839

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • e016ffa8b01c128f34e3b746034609ed.bin
    .zip

    Password: infected

  • 6be1d8f00f9c1b386f12b08e13d32dee1f8d1b1df23f41304645fe5bfd128d64.elf
    .elf linux sh