General

  • Target

    3cf759e34bb84133514e83f3bda2dfab.bin

  • Size

    42KB

  • MD5

    00ae28bd2673e5b68c07a2a7188c5155

  • SHA1

    11b5496ab2f5ca6aeba6d9db81554e549598573f

  • SHA256

    bfd31692541787a90dbbc9a97ae2ebb1411abb422a63ac33f12df1b670b0c23e

  • SHA512

    ade7e0ff2c1dd4396ea927d851ebc5f7ffc198f5fd277b54e8ccc7419ea6bce67cc1da6364367c65f1873c36273f5d7993fb6a4f805beaddcaee87c1ec4aed74

  • SSDEEP

    768:EfqFpy93/meW7s7chMWwjXX/RFOR9aB3y3QzOzS2f8AF0vPRdy1gpzxkBJ9PW/Eu:/wt/mbM5XP2RC3y32sS2EAF+PRdyszka

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

195.201.59.165:1865

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 3cf759e34bb84133514e83f3bda2dfab.bin
    .zip

    Password: infected

  • 8e6827182ab5956a65a9457d97e8d8e513196820f757d8c6bcfcd0ef8ee73933.elf
    .elf linux mipsbe