Overview

overview

10

Static

static

10

dad9883fc2...91.elf

ubuntu-18.04-amd64

dad9883fc2...91.elf

debian-9-armhf

dad9883fc2...91.elf

debian-9-mips

dad9883fc2...91.elf

debian-9-mipsel

Sharing

Copy URL Twitter E-mail

General

  • Target

    fcd8fd67d7e69169f93874a87024b011.bin

  • Size

    51KB

  • MD5

    fea0da18dd6fb5a8bd8977f78f2f0d8e

  • SHA1

    80b554b064f17d4b6f5d23002b981f16931f15a3

  • SHA256

    bc7b96ae55f3b8776fea3a11953e6c22a0128b2d8069ed960e8d65cc06a97504

  • SHA512

    35c2843604069fe159686d751168af3311823d768e9e1ce7480e98cb0a6d1d0aa5d976ea14a29909f8312a7e454aaef09b95f2e10fb8e9cb759cb0c7b4cc2e8b

  • SSDEEP

    1536:hUgvBt/MTFemc2pTRH3rZuTHuCtnYCTS0GbY:hUgvnkcmR7YTOSnYC3sY

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

91.92.244.230:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family
    gafgyt

Files

  • fcd8fd67d7e69169f93874a87024b011.bin
    .zip

    Password: infected

  • dad9883fc24599116391edc9631d1d330bbea049e016ee644062419ae1ef5d91.elf
    .elf linux