General

  • Target

    bab8f136daffaaecfe8c18dfc84f4973.bin

  • Size

    56KB

  • MD5

    1fd55914ba503c507a7ca0bc47089bc1

  • SHA1

    fb9f4af898940d2109fe6bf58bdad94eb455df44

  • SHA256

    f3c9492c60e4c11029c40cf4d1c5baa675f147a61d676b276077f28745205d6b

  • SHA512

    39fa7c5a26f8c976b4e490b44e694b9ccf25566bb3fcb2fdc724abc8d49519dc0b5d2d9487691b62a23d0adaea574c7b4801e26e2d2c601222e9577cf739e9c7

  • SSDEEP

    768:/Ir5fxzJ/eQuauXol9fBJh72TZcy4Edz7C1zuQCb2az9y8O6bpXaWFuKpQAl2Ch+:Ar5fxz1vu+9fLh7w4Evc1mTs8nbYpKRm

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

103.153.69.151:42516

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • bab8f136daffaaecfe8c18dfc84f4973.bin
    .zip

    Password: infected

  • 3acbdb023c0a065196c4bb3009edf0b995b3a89b13f10992f6a105d5a03b531a.elf
    .elf linux arm