General

  • Target

    dad82fb85815723a6160dfc0666b60df.bin

  • Size

    58KB

  • MD5

    df423f305502bff590d1b46da09a8be4

  • SHA1

    b232ea2cdf88e56b00c8027284409335956cca78

  • SHA256

    ce4edd4b7b67a3e7649122eca5c457e04ee914c7687e59c4f2235b52d9b520d6

  • SHA512

    59bf32b068d2e08a5d4d1834e1cff8191c50b8f0c9a485fe9c21104b34d7b0ad7a782b00f890a2f15b233c5e5108117a72c0ed60c14b99bb9768fcbfeb5e731b

  • SSDEEP

    768:EeYzl+QOaxCuNqWA2N++daBaWCukdH/ivIhcFUSQm1cz+s0SgJQKicpVQXVIa/Cb:u3Nqrfmx0gOFamEateVIUCTKQ1

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.170:4444

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • dad82fb85815723a6160dfc0666b60df.bin
    .zip

    Password: infected

  • 6a43e3cd1420b852e2012245dd2aa9207f2cec219424d9f077162ec67aad32d1.elf
    .elf linux sh