General

  • Target

    40d63a0757e8dde632c5b9fba70a6267.bin

  • Size

    55KB

  • MD5

    02a6c8d1804acff125d9970835482a1f

  • SHA1

    78235a68fcffc5f7fc0dc06d561216c93f3a34a4

  • SHA256

    1f2141e8d7c41cc057b8d82542a9c22634449d7a953d8c6016831458632591b7

  • SHA512

    cffd5f8fc653a1b32970dd4ea366bfe1da783c0396694869ffc13dd155b2095de84ee37c2809a8d387b3cd4771183f9feae187e93a52b26f1d3656529e59b0d9

  • SSDEEP

    768:dEixOlMuMb1UQ2OODYO8dptK4hYCW5C1QVebZTAOMZQjIu9Kks0FjRRGM095B5:dERlAb1UQ2hDy5KGZbHOu9KksGjeMC

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

78.40.117.218:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 40d63a0757e8dde632c5b9fba70a6267.bin
    .zip

    Password: infected

  • d85e079f2d774cace1e6b544e57300efe3a51ee1fff2d499123ce39945c77939.elf
    .elf linux arm