General

  • Target

    5b16164275d100fc5d56db9aaa45063e.bin

  • Size

    64KB

  • MD5

    4d9d2602ae04a26c9cd18103b7a8325b

  • SHA1

    d1f523dcd0e69d7a4d3d8d226205cbc415be9cc9

  • SHA256

    0c2b6f3320f21b76b0e446d3432965853295cbacee59cd10fd71c828508f9b9f

  • SHA512

    b8abebf6e5b7e0f5cec24986046b91fd0d62c06e24c638da92ea2877b36d15e04ab1672d3a419e6f93713a98f5b5d06ae16e703147c93ec3d37346eb58c4fd25

  • SSDEEP

    1536:iIRL0+vsiLKeqLy/2e4iJvt1Pfq337Xt9Z061Z04UbO/mARNWOL:iI5Hvsihqe/2e4ilt1KHZ6bqRao

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.145.42.90:4444

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 5b16164275d100fc5d56db9aaa45063e.bin
    .zip

    Password: infected

  • 196381ab55458962ffc149b510b67b62590fc3a363a899a1da1a9e63422be62d.elf
    .elf linux arm