gafgyt | Okami[.]mpsl[.]elf | Triage

Sharing

General

Target

Okami.mpsl.elf
Size

120KB
MD5

d3c1576e00d018c435e91dbe60b7a9d8
SHA1

a530409f62ff404a5eaa907240199ae4732d9ec3
SHA256

82d7788bd1812486f4f18c2917a3507ee90396389a9f801d97087be6ce60338b
SHA512

071c4c5e8b0a25edc134fe0aa596e862859c44ea4129fcc6368dab30ed60822e8f70f891bafd19952de20745b42a230aa190cbb08487366a338627b94c3db59f
SSDEEP

3072:lK0Q5Y/cz+oJ5hrqh7BAzRPRx9Fq51uUOypn:lK6/cCoJ5hW12zRPRx9Fq51uUOypn

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.246:6963

Signatures

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

Gafgyt family
gafgyt

Files

Okami.mpsl.elf
.elf linux mipsel