General

  • Target

    ad1e8953335a08237641bd735988b089.bin

  • Size

    45KB

  • MD5

    0433d7210c564bb5db692866b2df1d6d

  • SHA1

    e26452212413ca9b871835c6aa58bed0b12b02bd

  • SHA256

    753cb6b463adea2450a0a4943ac558614820d9f14a7c12c0d4623704c372a194

  • SHA512

    2a11c3012a6930348eaeca5e4186c54b4047569fcfc4e02e86591064e252dab066b69ae25978bbbc0628188126f8d39c20e5f6b0daca0db86312d7e94e963384

  • SSDEEP

    768:oDpCjWnD6Ikt31J6+VoHNyZHdHh5kRhV09FpjN5Av1JQkxM1egCVJJ8St1bSuqFv:wCjMD6Ia6hwtz0h69bAJ7xjLbXcc+QYn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

91.92.254.140:562

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • ad1e8953335a08237641bd735988b089.bin
    .zip

    Password: infected

  • 5b94e1be0e18af547d012489780b8809e7548e6446f50fded986e7dbf7846d99.elf
    .elf linux x86