General

  • Target

    796e052e18c3283cf04d6d7a16762dba.bin

  • Size

    56KB

  • MD5

    ef6450e81262e5d3a931286452c4ed56

  • SHA1

    3b35ccbeac830307b5f77d93cff6a111228eedf9

  • SHA256

    845d8a686c450697bcb1a1995a89c144f0c4c3019e9796f2da3a31c787c1603e

  • SHA512

    fcb8182758af35df4212b7da209138be09e5041dd4d7571438c8f4a23984aa377458087533fbf98bc52b5e1e536b3c9956e209d45500a941dd36ef8a78b1f893

  • SSDEEP

    1536:O32kxM5DHt+mylNfaUzZkOZUDXr+d5An2EW:75DHt+mylNyUzZMD70EjW

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

85.239.55.70:515

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 796e052e18c3283cf04d6d7a16762dba.bin
    .zip

    Password: infected

  • 8d221729d44dbbf05ce21d9f299865c042795b1a0c524dd9d2a9a858a16d2e31.elf
    .elf linux sparc