General

  • Target

    d111e3a8f38d3693ff456e90374cacfb.bin

  • Size

    42KB

  • MD5

    0038cd0ee7046bcb4976375427ba372d

  • SHA1

    b27d3264b107e844935681590d6d9808dd3456e0

  • SHA256

    a67729bd076a71ee5bb057f62dac87fa27b2897d48cbb1e5d4a301b480257dc5

  • SHA512

    86fe2d069cb49be7efd89ca87a482fe4918a2d6f1f1c7e142d2fb4f1f5c302944c1e3cec48b15111993e1412e61e6eafefa1a9fff2875386cfbb5f183a2d6b02

  • SSDEEP

    768:f6JQ/MwHaLsEd87P7PFRMX/YOszBte9KBi9igixrhyTXlmEgRR9i23E34i6lSLf:imHHaLDwhRG/Bs6+giyDlm5n9Da16lST

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

195.201.59.165:1865

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • d111e3a8f38d3693ff456e90374cacfb.bin
    .zip

    Password: infected

  • 0f60859f887446023b8f5d3b19b13ac50392dbb36392592845731a0a644a860e.elf
    .elf linux mipsel