General

  • Target

    d591b497663bcdad397b7727b240e9eb.bin

  • Size

    67KB

  • MD5

    1059af6589293b7154d23f4fbfb81b79

  • SHA1

    74c5c09ece69f03c8685a2b0823cb666376c1603

  • SHA256

    520ac36c40f5ef90d3e7ab906dfcf93c0343c032cbb3e22b977d289c1bbfd96f

  • SHA512

    e3ad48947aa2e53957e9f4c7a94bd5876ea7ad480eecdc259060b7e0ba8bb78d374c4287055c76b47c2605239c1594cc9a4c5dabdebea1d250448fe3d2bf9acf

  • SSDEEP

    1536:9rDDh2fI/luoP9OMpOaBlZwkaY4gYSlVFVxmDEL8sEbVIlfqBCsMgI0ijz:9NZ9OMkaBlFigVNmgBESg5ijz

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

94.156.71.205:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • d591b497663bcdad397b7727b240e9eb.bin
    .zip

    Password: infected

  • 286d4e775d7e9f95fe4dc805b47ca99b4e6b5da8b53211e4c2e4671e62655304.elf
    .elf linux arm