gafgyt | mipsel[.]elf

General

Target
mipsel.elf
Size 377KB
Sample260619-krpreaey3n
SHA256 7b1e4ef53d3b45fb4e2981e652a7c6ebfb7e62de0630ddaaa2929b4418a02149
MD5 2f27c0bcb3baf06a5b3597d74665b4d4
SHA1 8e7eb28d16a301902e80cb478486660f93217992
SHA512 3bc6cb75c3189483df7979dd48a89d2e598f8f144bb020c9735eee8cd9b0917fe920429e81db7dd85bf0f583a06a31242cdfd2aded14171d4a54d07069383efd
SSDEEP 3072:G+p48mI5vVaVMrUtmVKwjoCJZgnQUmr0h+afjUHJMNb:G+psM4YgwjoWZgQUmr0h+afjUHJMNb
TLSH
T1D684643399254DA7E4158CB3126732415C4E97BB84EA27E3FA668954FF2680F41FBEC0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet gafgyt

Family: Gafgyt/Bashlite
IoT botnet with numerous variants first seen in 2014.
botnet gafgyt

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

SHA256 7b1e4ef53d3b45fb4e2981e652a7c6ebfb7e62de0630ddaaa2929b4418a02149
MD5 2f27c0bcb3baf06a5b3597d74665b4d4
SHA1 8e7eb28d16a301902e80cb478486660f93217992
SHA512 3bc6cb75c3189483df7979dd48a89d2e598f8f144bb020c9735eee8cd9b0917fe920429e81db7dd85bf0f583a06a31242cdfd2aded14171d4a54d07069383efd
SSDEEP 3072:G+p48mI5vVaVMrUtmVKwjoCJZgnQUmr0h+afjUHJMNb:G+psM4YgwjoWZgQUmr0h+afjUHJMNb
TLSH
T1D684643399254DA7E4158CB3126732415C4E97BB84EA27E3FA668954FF2680F41FBEC0
MD5 SHA1 SHA512 SSDEEP TLSH

linux mipsel