General

  • Target

    d2f321754fcd30b4c08bfb70249a2904.bin

  • Size

    64KB

  • MD5

    a54987dcb3fcbf4659a933494486e7c6

  • SHA1

    3356971359bdd7b12964b7d90c4bba7329b08ebc

  • SHA256

    896b9e910da1c36b955b0ee0760248e1f35384aaee6fea5a27cd6446cbcb7893

  • SHA512

    7f0d78d192dd559a7fca2a8369b325bcb1b6416c240bf1a6204666e0d447d570de168460773debdabd16167c55c59f04c6abb2c6d6fd1fdb7050358f5e104355

  • SSDEEP

    1536:dKCHSPLp+LCmYowqvz8MIdpkMo3bG3mo3ephxSDNs2uSF17:dKCcp+mmYuW+M4bG3mo3Q8Ns1Sr7

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

5.253.246.39:666

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • d2f321754fcd30b4c08bfb70249a2904.bin
    .zip

    Password: infected

  • 8db7d658a9d3e808811ac5b756b693722141256ff47f05286eb9c5058c6b1f07.elf
    .elf linux arm