General

  • Target

    d1703388ddbd8e06c35d812ca40569bc.bin

  • Size

    42KB

  • MD5

    d2eacd690c60754faa8ba7862a7b804f

  • SHA1

    2707ca43c5bfcf6b8b84c0acd679ce4f65bd929e

  • SHA256

    f5a294a6aa5d198f25272727c56d423ec1d71014d3795db169ccb77945e52e13

  • SHA512

    11075372ecbeaf3581a256238f96eccb49adfe854c166adc35b17b636bc78e0df9900111a1a2af81ba874cf6df8b26a28636b5ce5d6f094af318bbde41464053

  • SSDEEP

    768:YMiadzDL3pGKh4lR97ARqhee6KUjZGcxSQ41jpLmwyLBwa9xDIuNdzvkvp:d/FL3pGM4lL7XIKUjsiS5pL4pdzvO

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

37.221.67.60:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • d1703388ddbd8e06c35d812ca40569bc.bin
    .zip

    Password: infected

  • b7bacf6d31f8bbd159f9025470d3897255b8059c9b08ce52bbd4221d4052cd63.elf
    .elf linux mipsbe