General

  • Target

    0d007559e50eed29a0bf4c4ee924e2ea.bin

  • Size

    45KB

  • MD5

    7670df3c5377b99388a3cd7b3d69c036

  • SHA1

    508a4e8c2a0105403a53ec3a89904208e1a27e5a

  • SHA256

    6e260a510927586276b096a5058ffa285712493aa2d594ebab3edbf677ef1d06

  • SHA512

    fec3f3aa3e7b2f2fe0dc28856806054da69ae62f1b052c04011890f59e4b67a8978efde14b67f0bd11485eb7e26ac9a61528639dec176ea178c2175f278ecbe5

  • SSDEEP

    768:UzIceVYmZS0uhauyChrg2bY7IWL7qUgAJQ+0hBJ1vDnvPJhcN6:UzIcIZSbhrIsoqUgA/0h1dik

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

103.173.255.143:839

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 0d007559e50eed29a0bf4c4ee924e2ea.bin
    .zip

    Password: infected

  • 54a95cfb297d094e15c6b7afd1dda7cce155b537e99ec5a7d48ea87c4c0d4c76.elf
    .elf linux sh