General

  • Target

    be8bc5483da0c1f246eb0e57c72d20a4.bin

  • Size

    42KB

  • MD5

    72c2f0d539fb0a92d56a962382a6bf05

  • SHA1

    33240e6d1aec6909198b7e6c1dc4f0c69603bfc2

  • SHA256

    8d3bee490d71a91b16d9fb8b821dcf9865a9bd8cdefda4207c3849736ca61ab1

  • SHA512

    8996d6875353d82b24e6b7fb4efdf2e38187627e144189811498664ba100c34be50145e264161995ca79a6a10858739bd1797bc8176d24e7505507379fa53dd5

  • SSDEEP

    768:7fClenJh+sdGyjfkTyF3xF5AvkPE0sLPbwCEjlyhZWcJ96xFvJA6VnSL2AN:7fiUUiGb+txfAMEjLP8zYhwXFxDxSpN

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

103.29.2.134:12345

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • be8bc5483da0c1f246eb0e57c72d20a4.bin
    .zip

    Password: infected

  • 34254e7c3ec86e864cfc6f88a62bb25187cddefcfaaa6079926ef374fdb74b5e.elf
    .elf linux sh