General

  • Target

    1a6d783301450b15938062c5c6ff1bae.bin

  • Size

    40KB

  • MD5

    c56d96aa87a77ef9a82b48801b068c53

  • SHA1

    0bdb589db28e35f83464e102ab17fb906d165fb3

  • SHA256

    1de5ea082c3bb5908d8a0b11a0705769e567071a479e3766fcb754934f53fdd8

  • SHA512

    6801a2ea77ee0bcad509a2683b98dc2873e885d19d6b35d2f53733592c390a6ca0ce6a348e5774b7d0fcb9d58047587e3aa92230f2665e8f1800279cef419b4b

  • SSDEEP

    768:DHQMQiMeyBXeIGdOhBt7fEpC5FFU9PpG+2/5kYbO9alqmJCHXdQWqB+36rfE+sDX:DHpJMBBXeIGmBt7fLi9jG5k7uqiCHXdL

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

89.190.156.159:671

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 1a6d783301450b15938062c5c6ff1bae.bin
    .zip

    Password: infected

  • 8e72e279c989c83f15ca3ef95f2a090ca6eda0c0d89afaebe03e026170d9fce6.elf
    .elf linux x64