General

  • Target

    8ce7cbe36d0a80c6264e8da29413bc5e.bin

  • Size

    57KB

  • MD5

    52297767b9a5b818f91ffe8f1befb0db

  • SHA1

    99caa559bbbb81c263f908763f86967e1ee84ee3

  • SHA256

    5141a0c4d8e10158b266103460225e0bbaa0cf82623ca6ca214e41b9f30a012f

  • SHA512

    41555a53b794254a471abb1505b392c692c0f33ed8ed84683e721cf3fc491bf3da8db1fc65f02125fda953afeb246d033b140a5c28d60f988e1dfea8a91ed948

  • SSDEEP

    768:hIOTDKMxrJ5ygSW52GDDdJ3q+uAw8yG/J8hljWyFpLLg2ebbDbNqMFzUUP/aAeJQ:h9m6rLLjHb6+Nw8y+eljW+pLLM84Ajq7

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

37.221.65.177:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 8ce7cbe36d0a80c6264e8da29413bc5e.bin
    .zip

    Password: infected

  • 11efc90303ece2af244938bf50afde60c0ccb9aca1aa3a35364a6d03929767d3.elf
    .elf linux arm