General

  • Target

    e94a16657ffbc48e0f4f2737acc3f7ba.bin

  • Size

    47KB

  • MD5

    3c0250a5f22382dc04c8e94e8eb27498

  • SHA1

    68fae24a9cbf62f793d391f7b454956dc77f0cfd

  • SHA256

    5bcfe309dcd914156f7f8039ef1cbc21f1fb2eb94a1236502805c9fd6cd1900d

  • SHA512

    e6cb4fa27a8a1f79398e85168059da62b1d373126564cad40931cb3baefe18ecd814554774cc95fc65f0771fbd73070b1dad38510a0cc0d0ae1dc50fd5a65102

  • SSDEEP

    768:eRB8SRHgtkXXyVnB74ETvn/SW54Gk0wgQUIJKBF1opZeYflyaqJM727GB8CpFdxh:umSxgOXiBxSW5ZkDnUQqKPeYflyDC72E

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

94.156.71.220:2821

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • e94a16657ffbc48e0f4f2737acc3f7ba.bin
    .zip

    Password: infected

  • 512debae32614ff552dde3385bed079ebd1db93e83e2eb3772e6ec9438d47a96.elf
    .elf linux mipsbe