General

  • Target

    ce15036218a76994844af6ca664d18be.bin

  • Size

    67KB

  • MD5

    6eab81cf625e9ef6d7343b4c6973d3f8

  • SHA1

    634c574329edd543f3ab5454dff95e56d3c2842e

  • SHA256

    75b478fe02a734ab1ff9e42b624c47c555db9a58f122c2390e8c1c725c00accb

  • SHA512

    4b02e1464896806bb23229688d8401e82bcda39f7ed86a052ea1a515dcef568fd58235eb131a8792ee1e48438dd5e2e21de0eb6aed8a6bd83ca12c74893c8a74

  • SSDEEP

    1536:ht6HgPrG52HQC7Ds1oTXJ8S/bMHOUbO+uf+2lLJvEcbYF:D6HgzGg7So2S/guUbpuf+2lhlE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

147.185.221.19:30455

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • ce15036218a76994844af6ca664d18be.bin
    .zip

    Password: infected

  • ec1257c412bd00c705a1e2c4ee1c66dd203eed142fda9670492dff61c09f462d.elf
    .elf linux arm