General

  • Target

    feb361105560a78c09776b959a18f89f.bin

  • Size

    39KB

  • MD5

    1509b2d628f2e5a3d11eb96f1093c319

  • SHA1

    190a665e219d81d1ad4ebc378666ab09d46c81eb

  • SHA256

    6bac9faa0e2ee38b09ed417c3a977af7a923473b0ce4a0482936e0d56ff47ce8

  • SHA512

    6ed68c289e474c29ec9a79244e67c246f70da21d38ad84c662d55e4667907e76ca1b78d3cd908ad5284a1e3d2f5c44b90bf87e92b4c8afc134848ff78664e15a

  • SSDEEP

    768:R4EDOmiRw2HvXYxbBCpmghN0qB6p2S3mCg20rPrZw/WeXPSeWNmVPXQ:eE6miXvXYxbUljB6p2S3SD1w/PSeWNmm

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

188.245.84.178:1865

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • feb361105560a78c09776b959a18f89f.bin
    .zip

    Password: infected

  • 94447f893bd0ac929c8d2c6c584c1efd4a9158b1a7d7f35ac73593b71b771004.elf
    .elf linux