gafgyt | _1ddcdf43d533e234a560a9625c33d5692bd403de65537acfe554427de1ace988[.]elf

General

Target
_1ddcdf43d533e234a560a9625c33d5692bd403de65537acfe554427de1ace988.elf
Size 110KB
Sample260620-p8fmaae16m
SHA256 1ddcdf43d533e234a560a9625c33d5692bd403de65537acfe554427de1ace988
MD5 baa67d1fae131dd2ef4022b695e2df64
SHA1 52c4cebac510b0300b28079661cb6d0a968828c5
SHA512 7818ab24c4a93ef1ed13fb76379bba7faa58fcd63cef2c2589caa8d410caab4de8c3380faf4e3a1d21d37f7f57841ed9998f19c6a7cb4d90dfb9070f51dcaa36
SSDEEP 3072:Pl2n/WelPFo8NezN3/S2VvXqpha0fZPCZVOXinYuM8R:FIy4QN3KjphaQZPCZVOXinYuM8R
TLSH
T167B37D1B6292C6FAC08356B527DFA2A18423F67A0B36721B73D4BDA43F15CC95D2D381
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet gafgyt

Family

C2

Family: Gafgyt/Bashlite
IoT botnet with numerous variants first seen in 2014.
botnet gafgyt

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

_1ddcdf43d533e234a560a9625c33d5692bd403de65537acfe554427de1ace988.elf

.elf 110KB

SHA256 1ddcdf43d533e234a560a9625c33d5692bd403de65537acfe554427de1ace988
MD5 baa67d1fae131dd2ef4022b695e2df64
SHA1 52c4cebac510b0300b28079661cb6d0a968828c5
SHA512 7818ab24c4a93ef1ed13fb76379bba7faa58fcd63cef2c2589caa8d410caab4de8c3380faf4e3a1d21d37f7f57841ed9998f19c6a7cb4d90dfb9070f51dcaa36
SSDEEP 3072:Pl2n/WelPFo8NezN3/S2VvXqpha0fZPCZVOXinYuM8R:FIy4QN3KjphaQZPCZVOXinYuM8R
TLSH
T167B37D1B6292C6FAC08356B527DFA2A18423F67A0B36721B73D4BDA43F15CC95D2D381
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64