General

  • Target

    52bc63fd650de35bc245573ae44ea364.bin

  • Size

    41KB

  • MD5

    fb4a1e0b740d1c97a2e170f6fe256ac2

  • SHA1

    57a5d8943042145e83f4af4ffbeb994319aaf9c9

  • SHA256

    18987e766af12360cd2e00f7851863042acaa51e1794c05a96e2465a6f40a0f7

  • SHA512

    3ccbac9cf26e9bd7e95b31348452b60c07dd9578e2191962b7452bd4561aa14ccfd53450adf98387f12c6b8a7d4e9001e3dad26128f36cd7589139294b83e382

  • SSDEEP

    768:VX6XvEGIGTkMBhQ9pz0KeZT6s0q17SxyVssiBTMsUceGjuW0ouUku+R4aLAP4/r:VX6X3Iy69Z0pTlu6ikdGjujduKJLZ/r

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.251:12345

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 52bc63fd650de35bc245573ae44ea364.bin
    .zip

    Password: infected

  • 2f530823763542f3b6fd2a9a3a32a44fdab8f266edc7dbbf1551045fdb72c867.elf
    .elf linux arm