General

  • Target

    754bf7dba3e5467a150b5bbe601f2f89.bin

  • Size

    41KB

  • MD5

    66d802810232e2706e352e094083d9eb

  • SHA1

    71ed78226473456e5fa871ba2e8b54b9e802613c

  • SHA256

    663a94d4f96c9ddf0c40a6f860dc75988e820124d17921d6cac2d8fbbdfb4ee9

  • SHA512

    c35bc039cce65a833731bf8b3b685a7db6399bc9177db80b20cb01c3167a40f3e43e53bcee9e38c6f5225a8314ae5abbc568cf6e166e84d0d35adf38f20fc256

  • SSDEEP

    768:IDntlA6HCj8RftobueguYlA8Cxhg5XMRbdXv7MkapQ/MjLk95qy7ve+hrf9HDJNh:IDrviooaeguuBIhgBMRbdj0ScY95HF3b

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

195.201.59.165:1865

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 754bf7dba3e5467a150b5bbe601f2f89.bin
    .zip

    Password: infected

  • a2d22be0752cfaae01a4227f4397033e38cc7d903c716458b54f01c811f67ba5.elf
    .elf linux x64