gafgyt | a-r[.]m-7[.]Sakura

General

Target
a-r.m-7.Sakura
Size 112KB
Sample260628-akktrset4x
SHA256 cee808610a5064df4b156931891925432ebef98e64a79b9805c10a39b0b417dd
MD5 5d531946e9025e8ba59d0ca267f918df
SHA1 9e63f44b5551970bcbc4b23ee75553de62191a4e
SHA512 2f28f6be3eadff453b4226efb15d018810ab5aebab884738c1042b7648a72ba975963310d3f671cf228d9ef856bbc35a40eacf9e9da35dc2dfca9e916404774c
SSDEEP 3072:Y+PrNZ+s+uJSuR5oHdDJdBRmnK0PDrO7fFOo:Y+PrNZIuJPzs5JdBRmnK0PDrO7fFOo
TLSH
T163B33913B71C0B53C49759F129BB3BF197A9B9E112966285A50AFFC01373DF02422F99
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet gafgyt

Family

C2

Family: Gafgyt/Bashlite
IoT botnet with numerous variants first seen in 2014.
botnet gafgyt

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

SHA256 cee808610a5064df4b156931891925432ebef98e64a79b9805c10a39b0b417dd
MD5 5d531946e9025e8ba59d0ca267f918df
SHA1 9e63f44b5551970bcbc4b23ee75553de62191a4e
SHA512 2f28f6be3eadff453b4226efb15d018810ab5aebab884738c1042b7648a72ba975963310d3f671cf228d9ef856bbc35a40eacf9e9da35dc2dfca9e916404774c
SSDEEP 3072:Y+PrNZ+s+uJSuR5oHdDJdBRmnK0PDrO7fFOo:Y+PrNZIuJPzs5JdBRmnK0PDrO7fFOo
TLSH
T163B33913B71C0B53C49759F129BB3BF197A9B9E112966285A50AFFC01373DF02422F99
MD5 SHA1 SHA512 SSDEEP TLSH

linux ppc