gafgyt | a-r[.]m-4[.]ISIS[.]elf | Triage

Sharing

General

Target

a-r.m-4.ISIS.elf
Size

110KB
MD5

90bdadbbd4ded70fff1855cacf413008
SHA1

2500c0d969f39385cb617fe8f5b1e36895556b54
SHA256

fffb3e8ed151fcb149a90df25a9f5634845eb8faaa18ea214a47b5092eb2ea40
SHA512

71cc303f927033eefed9de7365c6eb7f58246dc0cfbb526ff5e63114d42e0d037b7e9b42097cece54bf07aff80bd490fdd0df0ed873ad155dc04711afc1c6cd4
SSDEEP

3072:9lX2jKRi0ZDvCTpTv7DSubUmGVrQAXiUXouX:6j6ZUpTv7DImGVrQAXiUXouX

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

185.78.76.132:839

Signatures

Detected Gafgyt variant 1 IoCs

Processes:

resource yara_rule

sample family_gafgyt
Gafgyt family
gafgyt

Files

a-r.m-4.ISIS.elf
.elf linux arm