General

  • Target

    e427e2a9cd17c746d8aa085aeee7b80a.bin

  • Size

    47KB

  • MD5

    f0eee0b0c8a9f9dbb2943dba591b5e40

  • SHA1

    da9d676a729e4e589ea9f15b99a8e450c33b5b55

  • SHA256

    c3de710a0c1a05f64cd0e48408fd3fe530e32955b2d6860efee255eefbc8f6f3

  • SHA512

    1e6c31db97f8215d4fbf0f356d96fa26373cfc083474f26d56628efda20a2550c921403e793946b670a792b11e6c6e3b13281e0622cae7b01f14a7f8370e067e

  • SSDEEP

    768:fAvDfVYm+mRybqwEmynos8ErZjxunNwQqg0lrVPgs3b3nxYn5Lg4P3oo5hlobz:Ivqm2qdz8uAnNwE6uubcJgbopof

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

94.156.79.48:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • e427e2a9cd17c746d8aa085aeee7b80a.bin
    .zip

    Password: infected

  • b596267b511c3abe6f77ba3689118f75da34b83b1f8cb20ad84488d107603a94.elf
    .elf linux arm