gafgyt | mipsel[.]elf

General

Target
mipsel.elf
Size 377KB
Sample260622-hraalsaw3x
SHA256 3f274eee74858a60b0e3944df71653449459f78c6bc4b725aef4557fb1e57cc1
MD5 a315f26a9f80bb40790cbd945f9b83b0
SHA1 086b413deac46f46962973a788ff0ba4b13576a2
SHA512 7419d8ce5e3ce73390f4688d87849c2e2592ef576840fd2906ff9a9df91665fc0a763322399869a5b4697328309fc9d6ad2eef2496502d21357c86da39e7d43c
SSDEEP 3072:muL48mu5vVaVMrUtmVKwjoCVLAYQUmr0h+afjUHJMNb:muLuM4YgwjoiLANUmr0h+afjUHJMNb
TLSH
T16A84643399254DA7E4158CB3126732415C4E97BB84EA27E3FA668954FF2680F41FBEC0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet gafgyt

Family: Gafgyt/Bashlite
IoT botnet with numerous variants first seen in 2014.
botnet gafgyt

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

SHA256 3f274eee74858a60b0e3944df71653449459f78c6bc4b725aef4557fb1e57cc1
MD5 a315f26a9f80bb40790cbd945f9b83b0
SHA1 086b413deac46f46962973a788ff0ba4b13576a2
SHA512 7419d8ce5e3ce73390f4688d87849c2e2592ef576840fd2906ff9a9df91665fc0a763322399869a5b4697328309fc9d6ad2eef2496502d21357c86da39e7d43c
SSDEEP 3072:muL48mu5vVaVMrUtmVKwjoCVLAYQUmr0h+afjUHJMNb:muLuM4YgwjoiLANUmr0h+afjUHJMNb
TLSH
T16A84643399254DA7E4158CB3126732415C4E97BB84EA27E3FA668954FF2680F41FBEC0
MD5 SHA1 SHA512 SSDEEP TLSH

linux mipsel