General

  • Target

    f875cac4161134ccaee416e9a3739a6c.bin

  • Size

    64KB

  • MD5

    a4a0260136a65e33385e32272c581f65

  • SHA1

    54ca8ca24ad9902d1200f2e8210d2ce9ebde31a8

  • SHA256

    d069e10a4e692266c939d31946ea474ba1fd08f57ec7b797a7e8edc7332df1a6

  • SHA512

    ffcd5d20259df4a06b8406ed5061a840533c7b84e24db74b84b547d1d8b8a14db2aa921836ba216c5c40f8207eac07864ca34a018797d363f4708b13888556d7

  • SSDEEP

    1536:sZEQ6ZouqhlZdlTPisAbYj6H01cN6n18hWoQ0:7Qth6bG6H01au2Q0

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

94.156.79.48:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • f875cac4161134ccaee416e9a3739a6c.bin
    .zip

    Password: infected

  • 97bee29d2c0db86d06591b449c798f2c2e1a15f8c49ce05c7db9cb0fffe6fe2b.elf
    .elf linux arm