General

  • Target

    576b41e887299a4aad2cc4d8800aa824.bin

  • Size

    82KB

  • MD5

    84d61476d1c433c4dab42a0bef94f114

  • SHA1

    7699ba1cdc31d1f59a2fcff80de3d971fa4b796e

  • SHA256

    5335ce7af80ad0c7e35ba35e426df20dd2d412026d1fca637c150a7e127b9a8b

  • SHA512

    28cdc3104e60eae5e9789f558bd5010f2889983a22099e1f27d0a913500cd0db12d3653b8a2b8063546e1caa62e758081343bec0c665e10d7ac6b3bec80bc406

  • SSDEEP

    1536:PUbOQLemz8nygk0B/Z0IMKqGLcP5ao0T5ZrmMqPnbK/WYcS/emctu2:PUbOQS+8PpZ0ALe0TyXbK1Gj

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.196.8.31:3221

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 576b41e887299a4aad2cc4d8800aa824.bin
    .zip

    Password: infected

  • ce262644330bbc367d5e0d4c2364e45fad9c1a5ea7ed80b4f7edfffe542d7903.elf
    .elf linux arm