General

  • Target

    5297a2bea35d95ae18dd12982ca824e3.bin

  • Size

    48KB

  • MD5

    24aa15c4a3ea6b1b6b1e390f12494923

  • SHA1

    7cbfb9469956b7e392d3440fb4b8df395df04fe4

  • SHA256

    18eedf0221056d8b2b236fc8c12d630bcf9841462f5cd6a7e374c9f21c2d9507

  • SHA512

    316284482c0fcf964d75670d964586ee17603dedca0a3c064b7ab3649eb0b666ef52a9eee0a738cf89bc69a09277888373a2f8a493a301b1c451e04a660c8257

  • SSDEEP

    768:YW6i6dH/dBgMdcZkX4rodOhsE2/2p9MmoqEuZOBGAWlTFhzGa+IyUHyx4T5zBWwi:YRjB9N4aE25EZVAWlTnGa1yUHETQlK

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

91.92.244.230:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 5297a2bea35d95ae18dd12982ca824e3.bin
    .zip

    Password: infected

  • c0a7888141a18847c206bc76e6a6c7391f7ef9f10985f9f2eb20d19620c63d80.elf
    .elf linux x86