General

  • Target

    63704912b284468b4f9f7cd306695988dc1e0f7b742ca04b59afaeb7d326ab13.zip

  • Size

    67KB

  • MD5

    b7aed432a94df53379f48c88fdb8a1bb

  • SHA1

    9431a13197830c1c70cf6ca7c023d5b299a2e179

  • SHA256

    cbfa691e13ec2e687328babed3af50c5f6891a0c51905ad1fa50d4a26825f909

  • SHA512

    96b5b7e7f0334a79d9597ff83a30dbd4cce59e7c9dd89bc4a028a26f2508c245135f8a4b406f2aac12bc8b7e6d5747a089114170fb226be55f136d20a03cadda

  • SSDEEP

    1536:gPOjZN5+9L+wfko54Jj56flseYl1b0QW75rW:gIZN5ofl54Jj569xYK75q

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

188.166.67.116:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 63704912b284468b4f9f7cd306695988dc1e0f7b742ca04b59afaeb7d326ab13.zip
    .zip

    Password: infected

  • 63704912b284468b4f9f7cd306695988dc1e0f7b742ca04b59afaeb7d326ab13.elf
    .elf linux arm