General

  • Target

    79e2f80678e32f7a8e4acaeb503a99cd.bin

  • Size

    39KB

  • MD5

    e60d4bd55657aff82b47e2cec99868fc

  • SHA1

    fd69af2ac709b1addee5c57beb1f86632bd981e2

  • SHA256

    7bef962eb856fc92068bd4accccf5efc68b0b5bf574cb8052c990a7bbd508498

  • SHA512

    de5ec923773c90a4b31246b7495169ea4a604931abcf4550664d4f932ce95de4f30dd3559a4c21a939d10cda7f8261af5b6e7118ab3c0ebe0565982f34692ef9

  • SSDEEP

    768:wux0FihHb4aHfZkkWdM5N5oNKXP7ycZVFW3BEllxL5iBH9ZayV7r:h4aHxkdM5o+yin6BAiZaI3

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.144.165.227:22

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 79e2f80678e32f7a8e4acaeb503a99cd.bin
    .zip

    Password: infected

  • 5d6230eb45280135c1e5bf43b45ba8c1a64c4a9af8cb822845d691b3706d8068.elf
    .elf linux mipsbe