gafgyt | chernobyl[.]arm5[.]elf | Triage

Sharing

General

Target

chernobyl.arm5.elf
Size

157KB
MD5

5e0d02ef99d7c1c2fbf413a108e6eeae
SHA1

77a5e006edd227c34d97797444e7ba4c83cdf343
SHA256

49b4069d61d66beb779fe2797a0f0f82ee044c915c9edca250343c2ae341620e
SHA512

dc364a2305b1891695e740b81b78bd5276669c7dbafcb4bf601ffcd9f76fbfa3912599997c3be14a8ff0a4ab0c04c9a6f6bffe2322196ad68f1c758eca403178
SSDEEP

3072:ChA2qd/yhKBgXz3uaOmzq+XCd88V7Xxg2mgwZBxSQzNa:32qd/2KBgD3ua/TXCd88V7XVmgwZBxJg

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

195.179.230.64:606

Signatures

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

Gafgyt family
gafgyt

Files

chernobyl.arm5.elf
.elf linux arm