General

  • Target

    3ff9e2d0797020794e34365c37e9a963.bin

  • Size

    42KB

  • MD5

    fcd8b16e306bfdc5a8f74bc2604d5f46

  • SHA1

    8537ae3f724d4124a29408b7eaaa0c86f0819d0e

  • SHA256

    55f139d3adc4cabb232b25bdaecb1ce7a22135a53f21e555e99bee971e6e93c6

  • SHA512

    b24745689f09e90fc27588b68c2939fdb059e99acf8000458a73afe8adb04b86a73c28b64b4ad217edc38697bd4762d7bb5051aed3a8614bcb61ea9b995a8977

  • SSDEEP

    768:77kmecJZ19YkA/cxRg4aodR4msOzl/YkiEFbkv3x6HglI/u8KXoLvnWqY6vr:77kYJPC/c7Xhl/YBEFQv3NyKXoTRN

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

103.29.2.134:12345

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 3ff9e2d0797020794e34365c37e9a963.bin
    .zip

    Password: infected

  • d511c100966b936df679e667e2cc18bd4bdef37c2d65ddd5ff32932b4815309c.elf
    .elf linux mipsel