General

  • Target

    941227e2b497f67925f5796f90257408.bin

  • Size

    63KB

  • MD5

    01b37dd80020f838a0224491595cf5d2

  • SHA1

    9876bf0ab9c145293ebbe7609f4ab6fffbedf84a

  • SHA256

    5665538e76a0bea6ecaaa117aacab92890dde870a4eb1a0adcdd485eeb25676b

  • SHA512

    a4a3db01f0aa65335336e5aac0188ebfaeb6c567f8a824ff04d7e46996c182c6c41fa8176811368adf1c6c8cc6df4ce04c1eddc449afcd281ef0501e26c7995e

  • SSDEEP

    768:rdWehkcq3VsevE6d2oIvYqYYova1Qsr3gOnLdOIqjDKUxCGZmXjouuL8YP1c3iEA:rdWCq38I2oIMXMhOjbijZi8YPgiEWga

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

87.120.112.101:405

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 941227e2b497f67925f5796f90257408.bin
    .zip

    Password: infected

  • 8488c0e447428e855fa8376ea2b5e17852f6c399a2c92eabcc97823369d27e75.elf
    .elf linux mipsel