General

  • Target

    056b036b2464df14f060f1973dd0e353.bin

  • Size

    52KB

  • MD5

    e10d4658ff37732f31538c2d5dc723cf

  • SHA1

    5d1437883ea151eb74f560d5e45d34358ca660fd

  • SHA256

    21c5ad5bb808892518c6ec0782efe85b06dfd9e84f8347337a43cf227faaf529

  • SHA512

    7727bf713b135de0b5b8be54f589cbf9797564988f20034da68b085c6d5e587c3ca9e69b41464beffd4e758b01d50fb6dd131ddce7885da7f7c7fbb00bda48b8

  • SSDEEP

    1536:SlhU9ecEw4PQmtrARgPi3ePFQSYvlbfRquy:SWJEwHiPFqvFRquy

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

178.215.238.69:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • 056b036b2464df14f060f1973dd0e353.bin
    .zip

    Password: infected

  • 8e69ce695626d5f073a6a331bba9368637b5c24a90a81b005df71f40ba195124.elf
    .elf linux mipsel