General

  • Target

    0b78d4f4e55940119f53a5029cc6f52f.bin

  • Size

    42KB

  • MD5

    f44554e6f0cb48524f0188a7376b02e3

  • SHA1

    ad1ad833c1d48b48e8e9dbe96c21e55796d42a9c

  • SHA256

    749596405ce105e905978d20cd8cb13f05f5990e169d0e74b8920b558f5ac2d8

  • SHA512

    1f67ed088c4871b19848481f641618fa017c14347e404e5e86d9ea556f094b512da943a4faad631e718b4119b140b4cafad18f696792ba625ae9024aa45d57a0

  • SSDEEP

    768:0Jt0Mqj7KlGImiCZ/XbwZ2F5sZy0bmUfPKWelX+XYiY2TlRtAL4+vXK31cG61T:0Lw3knuqiMyaK5lX6Y2TKHS3HY

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.187.62:1865

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 0b78d4f4e55940119f53a5029cc6f52f.bin
    .zip

    Password: infected

  • 171afe100b392af0e94d258dcf062e47f02a2a0a758f06239c7e8078e8a6faac.elf
    .elf linux sh