General

  • Target

    m-7.8-k.blaze.elf

  • Size

    108KB

  • MD5

    cb3859fd8631c3ad046b68890583dded

  • SHA1

    0c45fe4f63a62b8b836a3ea613cf3e78e883ec9e

  • SHA256

    c6acb46eaf0a30193208843e1e7dac1c42891c1e1bd9e965d4bd56c2ff422281

  • SHA512

    05be0893b777ae6800d4d29582442846150a1e5b068e2216c04a2cf6abdfd44b5aac10fc788b069535137c81f5183acbee64644347b91ec45171e5290de2b4b6

  • SSDEEP

    1536:ndB0X2jnXb/7QMXLCBZoM5eLt5tAKLvj+GmVm1EGFjJIe2Tg26l:nTkMXsZo8GiKmVmuGFjJP2TL6l

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.61.184.126:2782

Signatures

  • Contains strings common to LOLSquad DDoS tools 1 IoCs

    Resembles a range of public tools written in C intended for DDoS attacks.

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • m-7.8-k.blaze.elf
    .elf linux sparc