gafgyt | c18e45bb96898108477465572767a891 | Triage

Sharing

General

Target

c18e45bb96898108477465572767a891
Size

101KB
MD5

c18e45bb96898108477465572767a891
SHA1

12400d9a56033e4df2e6d0125797fe9408ba658a
SHA256

2fd9cf18bff6970cd88d28ae4e500b741b23ca79d938ac2808d4380504d2c293
SHA512

8305e3afc2c8315e2e21b26618442efcfa89abc2ceb3bf1d4f0d145a87c543964da0e34310be84d72f7e7d4b099d8f5d1694f1728541898ef620157a4ccee6ce
SSDEEP

3072:SOGAEtZoGZKWl6u4YTnbHRbimmFVcqq0G27ZT:SqEtZ755nbHRbimmFVcqq0G27ZT

Score

10^/10

gafgyt mirai mirai_x86corona

Malware Config

Signatures

Detect Mirai payload 1 IoCs

Processes:

resource yara_rule

sample family_mirai
Detected Gafgyt variant 1 IoCs

Processes:

resource yara_rule

sample family_gafgyt

Detected x86corona Mirai variant 1 IoCs

File resembles variant of the Mirai bot which was first seen in early 2020.

Processes:

resource	yara_rule
sample	family_mirai_x86corona

Gafgyt family
gafgyt
Mirai family
mirai
Mirai_x86corona family
mirai_x86corona

Files

c18e45bb96898108477465572767a891
.elf linux x86