General

  • Target

    cb388dabc7c0f263425b687029f4037e.bin

  • Size

    41KB

  • MD5

    a89bb0e04f4cf304681e02ec59d86eae

  • SHA1

    9f09e8c296945d4d3eaf5ed1096f97eecf62736c

  • SHA256

    bd6deef0778494caca20d6b28e75b39a7effab4b79cc16a81db6ad98cfbee825

  • SHA512

    ac5182758e2a913d43b6967b7afa036b3c6c93c31af533150044cfc5d2ce1c61cddf3df005a32af1213981a9fa23fc2b43365fbeed2b01f3be27ea45332f270b

  • SSDEEP

    768:cRim+6xAdJpdn97pgwneii+Iy74cpHX0FcLfEeNao9mCwhewiVdf9C3+:cRC6Wf3n9VtHim74cpka1NaRE9W+

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

195.201.59.165:1865

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • cb388dabc7c0f263425b687029f4037e.bin
    .zip

    Password: infected

  • 7471a1dae77f38eab97aa3dae30547a55bd9981c2f492d72ff9b4611c0ad90ff.elf
    .elf linux arm