General

  • Target

    639eaba872dc72f3e5160d2791bbbfc8

  • Size

    182KB

  • MD5

    639eaba872dc72f3e5160d2791bbbfc8

  • SHA1

    36f556938f04d765accbe1891dba2284c30d84ef

  • SHA256

    d32b521db25172556159bf6c98057b02b5e9dce75890775c8ff83bb46028239c

  • SHA512

    322821c90175791d42f9706f2ed4114d002d3ee19f8d2bbfa8ed4d2fceb3acdddd93a684c9c7fde4336b5c893ae62377c9dc192f3046e9ae5fd15b86324a4fa2

  • SSDEEP

    3072:wcV6s+CaJNic8ryetJ8add9QzhsjmXgEildfi+8qLw/i+L9k:bV5+TJn9etJ8addQ6pdfi+8qLwa+L9k

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

149.56.228.32:252

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 639eaba872dc72f3e5160d2791bbbfc8
    .elf linux mipsbe