General

  • Target

    3854f62766408c59e8e6b77880d6301c.bin

  • Size

    44KB

  • MD5

    a7ab5c41b9521c0b97e999f9aeb99295

  • SHA1

    2ecccd1d261e65aefbba44787c202e53e0ae4f58

  • SHA256

    804b0959ebf89c1d7e439db0e32d685522767383206a7da84f6c0a4b6cc699f6

  • SHA512

    71edd6cce0f90bfffa28e82ec79c583eb104152a23ff4b987ca09cf855b7b6aa6ffdad559d8d0d2380d9d9acf74be4a73fc8bc95b5b59e8c5e21f121ab091961

  • SSDEEP

    768:V78AG1PTwK/oQmS0fvANUNBM2uvYlaDbq6dVfgt8Dspa6y9eaJpPERr1ShkpyWIr:V78AELwTQmS0fv7ppOiInxRXERr1GcL8

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

51.250.72.163:839

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 3854f62766408c59e8e6b77880d6301c.bin
    .zip

    Password: infected

  • 1d6669beef2e11a9bf13e7931015f7d63d0150c58666bbfaf5d88e4c507d9a9a.elf
    .elf linux mipsel