General

  • Target

    a1f1f29d081acb7dc39c8368e4c5e57f.bin

  • Size

    82KB

  • MD5

    bccd53ef1d4b9a5f76b4df9081245c61

  • SHA1

    13494b5548c612315d13a5383d7e92583e9c56f6

  • SHA256

    b75757ba9cb5de0d2d9ecf5ffbffc5436e49e570d1a0d80ca4a1f8a961392eba

  • SHA512

    0cfc1c84926b9d98be0b27c0dd0882eff52f0d88f2c584fcd720dff252d2933b6389c343ab9332f71e61bed0d4727e5e7516fde02f030f47ec96c30ea2f172ec

  • SSDEEP

    1536:pQchExBTc0ZWz8CiS6RNWxZZi6T4ilr9VRl08tSaLG5dF45maOv4e7dX7:AqdgCr4NWxZZXT74KG7Fumpv4eB

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.167:77

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • a1f1f29d081acb7dc39c8368e4c5e57f.bin
    .zip

    Password: infected

  • 895f51d9af7134ed1b29ba7e9b2a2a96df54f0f140fa1533733e8c673f1a42f9.elf
    .elf linux arm