gafgyt | ae2027931bd04e0093f676947bcedaa6[.]elf | Triage

Sharing

General

Target

ae2027931bd04e0093f676947bcedaa6.elf
Size

97KB
MD5

ae2027931bd04e0093f676947bcedaa6
SHA1

3917aca214904cdd8cabb97062db07604d9697bf
SHA256

570b7dfae285da085a3dca86a0cd9fbbe449b469bf10f6655a767f22d3a85543
SHA512

5eb2030593b4f5579de380c0cef10d7e92221dfc72627e5cadf488a73744a08cbf1600579e021850733ff810a596b958848fb3ae0fe61952e33c8bfca46cfc6f
SSDEEP

3072:VK1z13U6HzHoXRtmTUhQoguEmmFVcqq0GnDZT:VK7DDeKloguEmmFVcqq0GnDZT

Score

10^/10

gafgyt mirai mirai_x86corona

Malware Config

Signatures

Detect Mirai payload 1 IoCs

Processes:

resource yara_rule

sample family_mirai
Detected Gafgyt variant 1 IoCs

Processes:

resource yara_rule

sample family_gafgyt

Detected x86corona Mirai variant 1 IoCs

File resembles variant of the Mirai bot which was first seen in early 2020.

Processes:

resource	yara_rule
sample	family_mirai_x86corona

Gafgyt family
gafgyt
Mirai family
mirai
Mirai_x86corona family
mirai_x86corona

Files

ae2027931bd04e0093f676947bcedaa6.elf
.elf linux x86