gafgyt | ae2027931bd04e0093f676947bcedaa6[.]elf

Sharing

Target
ae2027931bd04e0093f676947bcedaa6.elf
Size 97KB
Sample220910-gxlp6addcn
SHA256 570b7dfae285da085a3dca86a0cd9fbbe449b469bf10f6655a767f22d3a85543
MD5 ae2027931bd04e0093f676947bcedaa6
SHA1 3917aca214904cdd8cabb97062db07604d9697bf
SHA512 5eb2030593b4f5579de380c0cef10d7e92221dfc72627e5cadf488a73744a08cbf1600579e021850733ff810a596b958848fb3ae0fe61952e33c8bfca46cfc6f
SSDEEP 3072:VK1z13U6HzHoXRtmTUhQoguEmmFVcqq0GnDZT:VK7DDeKloguEmmFVcqq0GnDZT
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Detect Mirai payload 1 IoCs

resource	yara_rule
sample	family_mirai

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

Detected x86corona Mirai variant 1 IoCs

File resembles variant of the Mirai bot which was first seen in early 2020.

resource	yara_rule
sample	family_mirai_x86corona

SHA256 570b7dfae285da085a3dca86a0cd9fbbe449b469bf10f6655a767f22d3a85543
MD5 ae2027931bd04e0093f676947bcedaa6
SHA1 3917aca214904cdd8cabb97062db07604d9697bf
SHA512 5eb2030593b4f5579de380c0cef10d7e92221dfc72627e5cadf488a73744a08cbf1600579e021850733ff810a596b958848fb3ae0fe61952e33c8bfca46cfc6f
SSDEEP 3072:VK1z13U6HzHoXRtmTUhQoguEmmFVcqq0GnDZT:VK7DDeKloguEmmFVcqq0GnDZT
MD5 SHA1 SHA512 SSDEEP

linux x86

Detect Mirai payload
Detected Gafgyt variant
Detected x86corona Mirai variant

File resembles variant of the Mirai bot which was first seen in early 2020.