gafgyt | a-r[.]m-4[.]s[.]elf | Triage

Sharing

General

Target

a-r.m-4.s.elf
Size

105KB
MD5

c2d17ced83c79c5ebaba537deb4ba539
SHA1

8a648f61921a8944420815c8a90c2aea3614a7f5
SHA256

e2b7a0dbfdfe388c9add8df0325734e246022bf2ae41ab3d473eef6db55a9c9c
SHA512

3d5adc64ef67e521629f7fa41739239b84c418c8866af5c7415af0802367c9084354d93ee49aac0a557d658cfe7dd76bb5c27a8552c0421996bda3f904e3331b
SSDEEP

3072:MSk+U6m1qW/w86lPbiRq6AmkZrQAhPDCXFke:U6mgW/16lPXmkZrQAhPDCXFke

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

196.251.80.231:12345

Signatures

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

Gafgyt family
gafgyt

Files

a-r.m-4.s.elf
.elf linux arm