gafgyt | m-6[.]8-k[.]ISIS[.]elf | Triage

Sharing

General

Target

m-6.8-k.ISIS.elf
Size

161KB
MD5

aa5281a4f008652bd5488dcea862e933
SHA1

5786bb24333eb832f81295abc2dab1486e412a40
SHA256

57166146af2e8e463cb70ff74b787473600941427569db083a96655728063541
SHA512

4081a4b1772687141d4caa6340b85808b1f76b46cbc6e1c1d027dd0b5f480eb737bf33cbc3c5e941b71ba2ea3adae9861422f40789a1b35ac9cd73d19d9d9ce4
SSDEEP

3072:Nd+3IoaOqhjsfDl02A6UCSMHnBQIM/9mVympwfFRQfVE:H+4oaOqhj2DzUCxHnBvM/9mVympwfFau

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

185.78.76.132:839

Signatures

Detected Gafgyt variant 1 IoCs

Processes:

resource	yara_rule
sample	family_gafgyt

Gafgyt family
gafgyt

Files

m-6.8-k.ISIS.elf
.elf linux arm