General

  • Target

    8dba4950f3120e3de39c66b59d36bc55.bin

  • Size

    41KB

  • MD5

    ed4b4533a2f592db46cc6d1b5fbeda80

  • SHA1

    20077347e8efcdf925360ff6cc351973bf64018f

  • SHA256

    6eec7ef70bb59707800863f48d4e5f6f7c6845db171a86ea4f7df7002e25df06

  • SHA512

    6dfb2effce6ec15ca8234829b4ead9d70045c234a3dce3010e50b78fe92668921b403f04a48a9c80fa45dfc371e5758fccc8cee27b7cf7432a9d3cbe2e16843a

  • SSDEEP

    768:AioxET308SqltoQbFrndovq4+NL+dSV64xVrHlJmpgr0arWA04e3JXU734Cfn82P:gxipHtoQJWn+NL+dSw4jjfT6IqJkjNtP

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.187.62:1865

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 8dba4950f3120e3de39c66b59d36bc55.bin
    .zip

    Password: infected

  • a3c242b6037414042b7e675022f93cc3d3fdcb7034d169b199458fa097dc1d58.elf
    .elf linux arm