General

  • Target

    828bf4959426a8eebc4e529520986185.bin

  • Size

    50KB

  • MD5

    717b1bdc47dee752c13c39940303b672

  • SHA1

    5e2163dc38deebf46318d0385670e7db783f03bb

  • SHA256

    4a0577b1e7e576e695baa353c918d58adf66d910d79edec3dac2f2ad45352427

  • SHA512

    87f68274c52b26a9a3df974cc2a6a239a7f721287c47bd87ef99c0b692364114c9c7b92d2138c56b842b92cd0f0d6ea6e1f3d7a14842d9a325d5aff7df0b208c

  • SSDEEP

    768:PnyKNe6gEgBebdVJXkxTLeWjFmbRipqM9/UVT9VAIJxb0Ngh/W52ezHEgULJEq:PCP0bdVJXkxTPjkbRic7RFO2teArB

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

94.156.79.48:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 828bf4959426a8eebc4e529520986185.bin
    .zip

    Password: infected

  • ee7a762e455f4e7f818b9a35152e2b03a58f170e408ff89a9136913ec55787bd.elf
    .elf linux mipsel