Overview

overview

10

Static

static

10

a-r.m-6.SNOOPY.elf

ubuntu-18.04-amd64

a-r.m-6.SNOOPY.elf

debian-9-armhf

a-r.m-6.SNOOPY.elf

debian-9-mips

a-r.m-6.SNOOPY.elf

debian-9-mipsel

Sharing

Copy URL Twitter E-mail

General

  • Target
    a-r.m-6.SNOOPY.elf
  • Size 78KB
  • Sample260429-tkfplaht5r
  • SHA256 4cb8c9d5973885f0a60e8cf2ce5b7ec2e6caa118388d26ddf78db5db5fbadb3f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
botnetgafgyt

Malware Config

Extracted

Family

  • gafgyt

C2

  • 87.121.79.201:6969

Signatures

  • Family: Gafgyt/Bashlite

    IoT botnet with numerous variants first seen in 2014.

    botnetgafgyt
  • Detected Gafgyt variant 1 IoCs

File Explorer

  • a-r.m-6.SNOOPY.elf
    .elf 78KB

a-r.m-6.SNOOPY.elf

  • SHA256 4cb8c9d5973885f0a60e8cf2ce5b7ec2e6caa118388d26ddf78db5db5fbadb3f
  • MD5 SHA1 SHA512 SSDEEP TLSH
linuxppc

  • Detected Gafgyt variant