General

  • Target

    d79befc0aca223ee5a2aaa65d32c6243.bin

  • Size

    42KB

  • MD5

    cdd8bed89bfeeeb973336ea1f3aa9950

  • SHA1

    3502a0ad135691a3905678a69dcb335b1545fd80

  • SHA256

    5f8db847bfbcbc2bea6ff9e0b58f87a5e6f5c187ee338a2ec116accc6c043461

  • SHA512

    d51fabb56f354fd85e7b75f18ad644655499c0fa139c7d62e9c3688ba998cbb81d703502cb5bbeb123a824f67e1eed6cbbfd8f0c150dbe0dc6f367e66f138e78

  • SSDEEP

    768:3IzQZYYpp8VOtL5X9Q/LtLfOlrOk6D96clQMhCaW0rQC7Ca+4Abl/wRYrurIXV:LuY78VOHX9Q/LtLfTN6cldo68n4AZ/w6

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

188.245.84.178:1865

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • d79befc0aca223ee5a2aaa65d32c6243.bin
    .zip

    Password: infected

  • c30958ba3b70e3e12fb2b7a16dbc096137b6662e9da31fd0573500786a65b3a0.elf
    .elf linux mipsel