Overview

overview

10

Static

static

10

57c980efff...13.elf

ubuntu-18.04-amd64

57c980efff...13.elf

debian-9-armhf

57c980efff...13.elf

debian-9-mips

57c980efff...13.elf

debian-9-mipsel

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c82271e5833a582a88d23484e51835d2.bin

  • Size

    42KB

  • MD5

    157df8f04238c7b134c8468670e4fb0c

  • SHA1

    371b3a2ee226888ce439a606a0558fb86e5a3eed

  • SHA256

    217844bcf6f7e20e29a0258187ca716d672920cf2c2a7906ffe5af27a625d0a8

  • SHA512

    d952d8178eba9fe07bd2056d9b9990f3b7a29d24abe7a45fddb62fa72eec68ab89cafc7ca01cf5028d55fecb49debfe64f032a4bd5dca761547658d1051ec3d9

  • SSDEEP

    768:Dz0lAbd29ZZ+NHZfaRs39Aq45bHDgquZphFcxbU//xpva/mW8:Dzm9ZUtAqEjYZ7FcmpvAmW8

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

188.245.84.178:1865

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family
    gafgyt

Files

  • c82271e5833a582a88d23484e51835d2.bin
    .zip

    Password: infected

  • 57c980effffd4971755bc0304291e0aa8d1434cc5d749fc4328aac6860526913.elf
    .elf linux sh