General

  • Target

    00a4e72f117bd8fb709db7aa48bdc78f.bin

  • Size

    49KB

  • MD5

    3076c65de0fc2f32fdfb3bc2018f6b4e

  • SHA1

    12f3726ce4db34794017d91e6a9735e6a26ef740

  • SHA256

    f03eca3f5b0b679a6b68220f037ec711cfbf72d2b9963926db4385b890e8da21

  • SHA512

    f62292bb35cccb9d5ed35c35499b5be7e96669ac4937872925ec859e8a785bc450a5f55192efdcd8cbf3a2e40773c0d0b0f75ae3332a2d71cb20e3b2089952ca

  • SSDEEP

    768:H8KRwv8XmPnkIj9TOjqsBe0SES2HL13qG6xqvvn55PJFMcmDI8UTzP:v+vxkIj9TCqMg2hKxqH55hFMcmDIxb

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

94.156.71.220:2821

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 00a4e72f117bd8fb709db7aa48bdc78f.bin
    .zip

    Password: infected

  • 1eb996487444bea8d7084a384fb8c622fe68038e3fac101ec288c0e6e878e990.elf
    .elf linux arm