General
-
Target
540b5d497f0572868d8f0d1286eef004.bin
-
Size
57KB
-
MD5
cba66ff542d3b0b6843a5b52def1e9b8
-
SHA1
c6c6bc0087fd62757b1127c0f6abe4d00c8622e7
-
SHA256
0ff6089c8a124dbdc70855a610e39062923b2bbbe3a5e168f1f3cb07ca054be6
-
SHA512
6811a2db276645f29e15ec01c006a75be82f7d0b36d4a1f65348e336792f1e0a979f31e53a4f8c3c52de459a613d01b9f94c215c3357d299f6559cb2a920e1e1
-
SSDEEP
768:MBsht2XBOpubRApC8kVTapdsL5sLhfo4hDeZHh+soDmyY5HdKSh8ZEth028kHZjm:M6h6rtAE8kNapdO5s+4ahL5dV7ksfrGP
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
193.35.18.187:64599
Signatures
-
Detected Gafgyt variant 1 IoCs
-
Gafgyt family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Files
-
540b5d497f0572868d8f0d1286eef004.bin
Password: infected
-
e946b3de4d1b1c1dd7b6d082fef0d150ec5212bb6bf8cadf83b3a3fb3a4b82b0.elf