General

  • Target

    d279feffb132253bbe7f05d3c43d4cd2.bin

  • Size

    82KB

  • MD5

    e125fa0516b278091c65e24a65aeba74

  • SHA1

    98935252b2232f95aeedc65051d818ac54d9269a

  • SHA256

    834b1900d0db85e3b33b7c2760fc48d26a834a0629d8c82499ed3d563408b10b

  • SHA512

    b15f7bb5cd0b432e724a68098b8205287ce6483aaa5003d966d94cc3c559f6a234a6a17f8437655f72699e184f7c01c30ddf6d423e919dfd4a4ae7fd9b421e5c

  • SSDEEP

    1536:MrHjf3tIMX9C2Xjm0Z5DndF0c+2gQdQE5WSDFlYPOHhv4ruN0M/G:sj/tzo2Xjm25ZF+2gYQEQSDUuhSqY

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.95.169.138:322

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • d279feffb132253bbe7f05d3c43d4cd2.bin
    .zip

    Password: infected

  • a9ce0201536afb380206d2ef843eaa025490a268179a115451b344adc594bae2.elf
    .elf linux arm