gafgyt | i[.]i686 | Triage™

Sharing

Target
i.i686
Size 96KB
Sample220127-jt3klshhc4
SHA256 810727a7efdb0de4f509e4b93e5e1e6a6f1e50f81b27dbe0a8ec8fd0097bc165
MD5 b3a19fb8ca188da988c7e1e73d5b2e92
SHA1 5bed4fb0178d558bdc6342e73e0a921d4c51388b
SHA512 6dd81c621a36ce0857905c7a859a24d4f98da39b7e2a0bd061ecbf577b3e806e1b3b683daf5eed01fbe6384b6bb3a2aa51b04ec98a89cf411f639f206f72f9b2
SSDEEP 3072:3KzV6PypVjKWXFKgn71s01P2dQ5h6oJ9bE37K812UsYG:3KB6PypVjKWXFqc2dQ5h6obE37K812UI
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Detect Mirai Payload 1 IoCs

resource	yara_rule
sample	family_mirai

Detected Gafgyt Variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

Detected x86corona Mirai Variant 1 IoCs

File resembles variant of the Mirai bot which was first seen in early 2020.

resource	yara_rule
sample	family_mirai_x86corona

SHA256 810727a7efdb0de4f509e4b93e5e1e6a6f1e50f81b27dbe0a8ec8fd0097bc165
MD5 b3a19fb8ca188da988c7e1e73d5b2e92
SHA1 5bed4fb0178d558bdc6342e73e0a921d4c51388b
SHA512 6dd81c621a36ce0857905c7a859a24d4f98da39b7e2a0bd061ecbf577b3e806e1b3b683daf5eed01fbe6384b6bb3a2aa51b04ec98a89cf411f639f206f72f9b2
SSDEEP 3072:3KzV6PypVjKWXFKgn71s01P2dQ5h6oJ9bE37K812UsYG:3KB6PypVjKWXFqc2dQ5h6obE37K812UI
MD5 SHA1 SHA512 SSDEEP

linux x86

Detect Mirai Payload
Detected Gafgyt Variant
Detected x86corona Mirai Variant

File resembles variant of the Mirai bot which was first seen in early 2020.