General

  • Target

    9c390a025f471a19d52479b623e0e973.bin

  • Size

    47KB

  • MD5

    a8f1bdd190e620e6b3685505c3e05b94

  • SHA1

    4402995a39f4cd37e16627dd07a7ea9f2fd88c16

  • SHA256

    3e41f426feffe1df57a6233329b7432cf5fdc446af6c0ccde4090ad2c27c94d5

  • SHA512

    94cf164d12723a4a71c28f4119bc4789be4356cb12b08738770f9bb364b015b33f9ed9594d876c6d703dae8db3f3c86b8320508aff0a97758929c0c66a150d72

  • SSDEEP

    768:paOyeb5gq+kDUMwMf2aXityfPU26/OZB2hxHnaOL88FrE1I4OQ16uMPejv9JFHbD:VPYMP/5zWxH9xFoOQRAC9JFH95pMuq/g

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.196.8.31:76

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 9c390a025f471a19d52479b623e0e973.bin
    .zip

    Password: infected

  • bbf54c47d707cb5ce5ea9a1054faecd3ed6cbf6337ff89c250d82925648818b3.elf
    .elf linux arm