gafgyt | i686[.]elf

General

Target
i686.elf
Size 319KB
Sample260616-ndewtsds8s
SHA256 858f7d29d3d787d7089c4dcc29daf80552301dc6b4655025fec9d7c01129cbf0
MD5 187195d018a4fc87bd88762cb4a56bef
SHA1 f57d073ec7784188fb3fe0cdee0219d891f79f39
SHA512 7268c4222e78a09bc61d0d15c47455cb093f55596874e01cd9e1d6909ea3ddf22918d7bf30bc44ce8b8635001e4dd0f91675b114b2bf025f3cef34d1fe5dc8cf
SSDEEP 6144:WetmWXMlP8ZiNyKAwjopCunowmXFvtMdxDaJaT:WetmWXMawjaCunmXFvtMdxDaJaT
TLSH
T159647433D91684A1E0104CF3126736869C4797BF88A726D3EF5A5DA0FF3145B92BAEC1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet gafgyt

Family: Gafgyt/Bashlite
IoT botnet with numerous variants first seen in 2014.
botnet gafgyt

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

SHA256 858f7d29d3d787d7089c4dcc29daf80552301dc6b4655025fec9d7c01129cbf0
MD5 187195d018a4fc87bd88762cb4a56bef
SHA1 f57d073ec7784188fb3fe0cdee0219d891f79f39
SHA512 7268c4222e78a09bc61d0d15c47455cb093f55596874e01cd9e1d6909ea3ddf22918d7bf30bc44ce8b8635001e4dd0f91675b114b2bf025f3cef34d1fe5dc8cf
SSDEEP 6144:WetmWXMlP8ZiNyKAwjopCunowmXFvtMdxDaJaT:WetmWXMawjaCunmXFvtMdxDaJaT
TLSH
T159647433D91684A1E0104CF3126736869C4797BF88A726D3EF5A5DA0FF3145B92BAEC1
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86