Overview

overview

10

Static

static

10

7a5cf7437c...b3.elf

ubuntu-18.04-amd64

7a5cf7437c...b3.elf

debian-9-armhf

7a5cf7437c...b3.elf

debian-9-mips

7a5cf7437c...b3.elf

debian-9-mipsel

Sharing

Copy URL Twitter E-mail

General

  • Target

    4ead52eb129ba3a3a9518da97f6b4526.bin

  • Size

    48KB

  • MD5

    30a71d08a59582e315f6691fadd9aa73

  • SHA1

    a5848a428249d6e05944caad847a5daeab3c404f

  • SHA256

    694da25e9f6eacd34b0434eff19db76e43e4eb40860a3f5bfecf7502380f4064

  • SHA512

    33ebdce21bd3c25be956110dce8e70cfc8632b5cd1628711210519c13b7503d4376cb95905b8e2054890e065e79ea30f01e3857dcc228b0390dd6cf0030183a8

  • SSDEEP

    1536:TphpNyIEtd1yFskhKP+SNb2+gj/za50iFPlL:TTGh1yFphKTV9

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

91.92.254.140:562

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family
    gafgyt

Files

  • 4ead52eb129ba3a3a9518da97f6b4526.bin
    .zip

    Password: infected

  • 7a5cf7437c802f611e7fbdd13b5aafa3b1e55a245e883dab83f7e4790b36b4b3.elf
    .elf linux ppc