General

  • Target

    d76d2bc81329e13416b02637805f439a.bin

  • Size

    47KB

  • MD5

    dbb98720f74fe3ff40080a02573cccb4

  • SHA1

    1a228176c1bc8a422bfc10deac3e2e0de97cf492

  • SHA256

    3216262f31b08ac3145f1196737d657452cbb2eba196f0b142a012c1a3af3047

  • SHA512

    f0e9789d6d74b3639568b2d58995b6c84b531105f5609ab615daef2ea73d0074f2626c9455c3c9bc39d7db472919be131ecc2d975f8995683a0ba22d73004d1d

  • SSDEEP

    768:PqrS7ZVCiI9kNoLXgDSyTKN73kZOEVKGdx81slLwNlaQroF3pQLT4e+CGiTEx2wR:PYS7ZVS9kNoLKSySYYy9x98ldroPucPr

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

37.221.65.177:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • d76d2bc81329e13416b02637805f439a.bin
    .zip

    Password: infected

  • fb3743ac5374804c4b7ac4f74c497b432e515d391baa68f02d0670b6106dca3b.elf
    .elf linux x64