gafgyt | Okami[.]arm4[.]elf | Triage

Sharing

General

Target

Okami.arm4.elf
Size

103KB
MD5

e52e05ee9bab4ff88b3ee74b93cc7d70
SHA1

e710965854b34572cc306c0bac1bed329b1d5eb0
SHA256

9672abab573b4770264db09be4672170e8a5ace2beb2997cce1ec31dc1a90831
SHA512

ce6f5926970c770dcbbc21a78276da992a06e853fa84a1f55827d48da7c2ca8824aa50fae631edfcb65c700b8e490520c75c434b212a5e3e3c6fbd563e4c7192
SSDEEP

3072:oROlP82W5t0i0g5hWIxevff8iowWQQkha6Qzadn:dlWTL0g5hVxeHowWQQkha6Qzadn

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

193.200.78.49:6963

Signatures

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

Gafgyt family
gafgyt

Files

Okami.arm4.elf
.elf linux arm