General

  • Target

    dd684a97f43412babe45578e68f8d789.bin

  • Size

    50KB

  • MD5

    dfaa0088da88cb6fa288f4742cfa8b99

  • SHA1

    e687d2013ed2172819a0fe549649244618ba29a7

  • SHA256

    a18f2512a9fc3e7be428fe1b98c61d3c3b5f84914192dcfa134dc52c369234ee

  • SHA512

    0f75cd92d3d0f9583f6b0dbd607ce21734f26859b7ed510b599e331c179377f6aab2a1cff94025f6d644e4561e6b1cf5f81004e8d737b8511706b184e7f35d87

  • SSDEEP

    1536:T7poO8Ri10sRPdBSZpQCfgdJwYFnsOqms:z8Ri15dcbufFnsOq7

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

176.97.114.45:666

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • dd684a97f43412babe45578e68f8d789.bin
    .zip

    Password: infected

  • 03be42f6edfd27ccd5797ed071819b066c0e49743bce1c1170191de3de6b9dde.elf
    .elf linux mipsbe