gafgyt | m-6[.]8-k[.]ISIS[.]elf | Triage

Sharing

General

Target

m-6.8-k.ISIS.elf
Size

161KB
MD5

4c34dc74ba9a5484e17e0f6e18162ff7
SHA1

ee17c9d64ecadb1ca6c9b4d3e0b49add5ab32a7f
SHA256

3dc765bd2cf39ce4462b6d753ac9ff57e9fac40d2a931b52184184a0186f867c
SHA512

87ffc66e8dffcddfe3fe2be1c4a22a343f858d970bf5bcbff44a2e6071c3f495dc826941636da0cde702ebe51c5602630ca85490d6f85d059250db749c64a9bf
SSDEEP

3072:AdkbJBagqhj7yLWcugMcrSQLnpQEM/9q4MCmpwfFRQfVE:MkNBagqhjWLycrhLnpzM/95MCmpwfFau

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

176.65.143.172:839

Signatures

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

Gafgyt family
gafgyt

Files

m-6.8-k.ISIS.elf
.elf linux arm