General

  • Target

    39fd0d62af2c8f16c244373bc3a699b8.bin

  • Size

    40KB

  • MD5

    207646d80b461307f10fced578600f7b

  • SHA1

    d4a0c456568c6c3c36f57314c34a2d29c75e5fbf

  • SHA256

    9ffbc8b0339e8a3ca03077fb4193882b237bbf44df64230363bd69b88ece6203

  • SHA512

    6bba98d0faa09806ef139e5f9e0b3d3f171ed710aff2a0cb963fdacfdf73c2e8828435a5648bf9f6aa33c490d6aab92933f520105f9fe63a686a637b88947d72

  • SSDEEP

    768:/oJ//jI/JSYQs+hCEwyyLTPffEB/hpjIW2AR7Bn5Hm5:/a/MxOpvyfPffEybAR7NU5

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

193.233.252.242:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 39fd0d62af2c8f16c244373bc3a699b8.bin
    .zip

    Password: infected

  • 4209aaf8d9545dbc09cf19025ef95e4bdc2502aeb23c98e98d076918408d30de.elf
    .elf linux x64