gafgyt | roze[.]armv4[.]elf | Triage

Sharing

General

Target

roze.armv4.elf
Size

167KB
MD5

c7ab3299bbb43f38048cd35209006d18
SHA1

d4a1fe8a95308a25f187693b16b2214d8e0420f0
SHA256

0463395ca3c8a0a7e50f0959e799d839affb2c24d9a0a039d7fd6ad192d3dc14
SHA512

0215692ce1a90181e2d995f36f084ca8c898888776d9a8713b801c604465929b4fa0ea02a761588a867b688af765b2281ca58668d39859acb16dbb301b1cd80e
SSDEEP

3072:Bdy8WoZAeDfivrlIsFZjgdc0xkWQLz+5hij7seUmSQnNbGUBn:f6vpu1xkWQf+5hij71UmSQnNbGUBn

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

37.44.238.73:8778

Signatures

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

Gafgyt family
gafgyt

Files

roze.armv4.elf
.elf linux arm