General

  • Target

    30cdd978678c9af176def0770a652740.bin

  • Size

    46KB

  • MD5

    0d2607faf51e2287f0cfbfe4133a96ad

  • SHA1

    f531e7127994d906260431129d64819d7f3fbead

  • SHA256

    4bdca7847539e96ceffdd7e386a5400ca3d4a3e7466fb9ad919a0d565322a32b

  • SHA512

    76f06fe30fec2d41cb607421da1794d4bc20fa01ebec85e6121bb5e1c342925512a60d9fe673b85e97a96779f560efc7f3ccf9dca822046e860a2e4196f33be5

  • SSDEEP

    768:pQsNTNcUw+5e4z7T0djFczpNNSIOCoE9wZF0aEuaO8xqcZuXmC/hMeWOfxX/q:p5TN9DQ4z7T06zpnBoEeDmxqcCMMJPq

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

103.173.255.143:839

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 30cdd978678c9af176def0770a652740.bin
    .zip

    Password: infected

  • 7fdc310ffd1cb5088bb35af925105220de5fb8cb4cb3cb5c889a93f5ddd0420f.elf
    .elf linux arm