General

  • Target

    804ffb52bd9cfc282153a1d02f589879.bin

  • Size

    55KB

  • MD5

    ce301775fce23fd49800cc84e7404b71

  • SHA1

    65fada865e2a34ccc4590984f28ef95ef96580c6

  • SHA256

    e51ffcc9a1973dddcb58883bc7380bab327f46c5af7e42d72933cc57a793d65e

  • SHA512

    e8530bc0c614140cc03518b4904b58ebc03484ce249347132efcde5b4308ae9e7485e3b7b83fbfcd67e93089cf9be60fa475a5a7127ace19a01ab2f8591ef925

  • SSDEEP

    1536:KQkyqegF9Xx+e3yiE5C4fFcyyB6vWt+Ye+jJ/kG:KQkyqTbkeidXFcyy8vWJvVkG

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.170:4444

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 804ffb52bd9cfc282153a1d02f589879.bin
    .zip

    Password: infected

  • 02db75309528fe753e835cddb0277b04d765fdb63ce599a090d528766a120cab.elf
    .elf linux sparc