General

  • Target

    48a3afe7fd643984bc5ce7ebc8040fc1.bin

  • Size

    42KB

  • MD5

    69e1cdbc2e0435e8e90e43a940d5f9aa

  • SHA1

    ded7c11e13b320baa8c575f9d12ed4fd3ba5edce

  • SHA256

    a8650c5d068566d6341dd679a763e949bcac28e9008b88de57fe5955803aad3e

  • SHA512

    53e40d5e479f7e2ac032a2496cd849b078e62566139687e5ff397351bc5a2b505b8beb6fe536f5d325ec5d8afa5f6c2df2e02868a1c681dd6fdb4c76429906ed

  • SSDEEP

    768:GiaHDFRuIDXENWKIfhYLzm/gavmS8k4BwUe+rrpvFSgyCRb7UZc65bq27:LaHvuILWIfhYLzm/Dm9vvPpdSi08U

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

193.233.252.242:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 48a3afe7fd643984bc5ce7ebc8040fc1.bin
    .zip

    Password: infected

  • df1b4986bbe75b69b0f282a398b1ac4b075b87abeb94fbbea70aacdb89dce67f.elf
    .elf linux mipsel