General

  • Target

    35999e211f37f044baef609e8de052b0.bin

  • Size

    41KB

  • MD5

    7ed89e898a9c4940c85f1b7123a9e9e6

  • SHA1

    e2db3d13c94004bbfbe8339894f0fbca611f3f65

  • SHA256

    4170ff93b2c37cb14388fe410ebb40c5247e13887a5ad89b7b580ee886f98c2d

  • SHA512

    4d3d8f74fde2cb1571448d4f6549d69313cbf78af2d7a67ef09c68424823dd8ad86b2428d50d4693bb3f07e33beb494dd0f458c49fad14283bff666966034b39

  • SSDEEP

    768:xeiiMwK/t4A/EufAQGvrIO59gW8LPyqA8ZC4tHYx6rBD9nfxO9+:AJy/6A/EjDIO5T8mnoHeOFxOw

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

188.245.84.178:1865

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 35999e211f37f044baef609e8de052b0.bin
    .zip

    Password: infected

  • 40be8bf94e11a94e5a62f0387797526f442dc1439cb78973e3a9587a4b8f578c.elf
    .elf linux x64