General

  • Target

    e9fc431388e0376748726d14a01c08c9.bin

  • Size

    42KB

  • MD5

    4be4d69e208e4c3f9a5fe3f83aa43e7e

  • SHA1

    b2fee14abcfcfcd44dcd1ea2273253462325cbd0

  • SHA256

    d16f079b9b3859d61c603f5c57acf7a212616d9e171833b27627ae9e9444200f

  • SHA512

    734dfd7b55728208b1b0cecc22859b5b82c1707b5c05987cb4391a94f1085b67a27ec0d72f52be74848ee67be701ee5e8fab3a005adbf2bf8738bb2d960a78d7

  • SSDEEP

    768:Bf2PoeV9kmSMT+LwFTjrNuYPK9BT9ZcO0j6QmLrx+dD3PTlz7+Lux:B+PJSMT+LCfNlK9BT9Zc6wdbLF+6x

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

94.156.8.9:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • e9fc431388e0376748726d14a01c08c9.bin
    .zip

    Password: infected

  • 8ea71efc465b85056984c94ba262456237911d604a6754e09ba789a04641cf17.elf
    .elf linux sh