General

  • Target

    af4819df1f1a35686fc06ed91574dd95.bin

  • Size

    74KB

  • MD5

    bd11266164270e87110bf3480aa22ab4

  • SHA1

    262fd5fcd8253cd8c7f17370f0b4465e371440ab

  • SHA256

    0e45f94997487f3455df79d251fc47d3a9015d1fa8f21ae67f9e9e0c74041c92

  • SHA512

    df2527d0d0b9ec55bb188a280b41325bca6bb02fa0d40b333b1d1ada7f26f1153404cec7b5f005ccbcb7e7ab750f1ed0e03c4f6540d2adf084ac9a4a05c856fd

  • SSDEEP

    1536:2fAjAttoSe0zJvML95Ou5PNnAgNXEOaPGvOC2oyNjjsc0QpD2U:2fAjAwsFU95OuP1RuNGmC23Njjsc0CDb

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

91.92.244.230:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • af4819df1f1a35686fc06ed91574dd95.bin
    .zip

    Password: infected

  • 7918f0d73b038e3371290f78a6e5c158ca98cb04c09bb690ee2cd9f288444ac6.elf
    .elf linux arm