General

  • Target

    505f5678426ea746c53cbb453c76ab39.bin

  • Size

    86KB

  • MD5

    d4b8bd2ae7db981f2d98922f84190634

  • SHA1

    9d43148c81f114637a569ee80c72fba92376fa84

  • SHA256

    b5a108762ebac4d70968545d30ec86037d07103ad6d29ac4c7908c4f6cabfba9

  • SHA512

    e8373d981b07f7f61609d66ceaf9318b728694aef9b8db7f3cb4b0814ffb99fba01a2bd884cc3b00226278b9037535ecc0c3b20b2ea42997505431c49552246c

  • SSDEEP

    1536:reekJA5Fu76NfJxCGSOP+cCaub37herNYxk2LH8P1GyfKg4E502K2rqDbu0iqZcW:CBEu7sfJffCXb3NMYxk2LH8syT5lK2re

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

181.214.231.152:96666

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 505f5678426ea746c53cbb453c76ab39.bin
    .zip

    Password: infected

  • 626499411f1d409fbd81f8be054653d3626e697f610dfb5cb0b4484ef97f8c70.elf
    .elf linux sparc