gafgyt | rebirth[.]arm4[.]elf | Triage

Sharing

General

Target

rebirth.arm4.elf
Size

108KB
MD5

8b3add14c03e44994a8687b04586784c
SHA1

e9e69f14253bd82bf0e555335115eb25412eb094
SHA256

34dc3e69779852517064b1ffd5464825a07f8e727568b49735e51ca3a7c617a9
SHA512

f416e22b3a92902c69d372482e4f3017cc22d3df7bdc356e10d345a1c123df7561f02a54089d0261c5b742be0d336cffa45dd23ca80d45333987b5c32c2050c0
SSDEEP

3072:HgvUxOcKFN+B9Jy8D3XvpIhfX44CHz9cm7QnKQXaeW:HDEKXy8rvOFX44CZcm7QnKGaeW

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

87.120.113.63:666

Signatures

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

Gafgyt family
gafgyt

Files

rebirth.arm4.elf
.elf linux arm