gafgyt | X86_64[.]elf

General

Target
X86_64.elf
Size 180KB
Sample260826-gcdh2sgp21
SHA256 5a21c34ff54ab1a92246b9cfba815ed187fe636b9350d41e26c5e4aa8f4bf891
MD5 a3f170fe42e91ad7f9e6748e06fbf3ad
SHA1 8979e463c89d8e139c8340a093898d1004522eb6
SHA512 e3d6d412f17d8fe4eedb216ccade681db9618fff31481092b9864cc3846d0faa389f7811b893fa8150fb0396339b34fe21f9e972902587a91089814e68742f40
SSDEEP 3072:5wj2cqrE/ZIaKKAkclJsqVshGP+ke+N/xM/9N+Iim6POmZho9NSf:5wj2fgxIaKKAkoJsvGP+ke+NpM/9N+RV
TLSH
T102044D25EA81CB53C1D21B79B69F424137239F65E3DB73069918BFB43FA275E0E22502
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet gafgyt

Family: Gafgyt/Bashlite
IoT botnet with numerous variants first seen in 2014.
botnet gafgyt

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

SHA256 5a21c34ff54ab1a92246b9cfba815ed187fe636b9350d41e26c5e4aa8f4bf891
MD5 a3f170fe42e91ad7f9e6748e06fbf3ad
SHA1 8979e463c89d8e139c8340a093898d1004522eb6
SHA512 e3d6d412f17d8fe4eedb216ccade681db9618fff31481092b9864cc3846d0faa389f7811b893fa8150fb0396339b34fe21f9e972902587a91089814e68742f40
SSDEEP 3072:5wj2cqrE/ZIaKKAkclJsqVshGP+ke+N/xM/9N+Iim6POmZho9NSf:5wj2fgxIaKKAkoJsvGP+ke+NpM/9N+RV
TLSH
T102044D25EA81CB53C1D21B79B69F424137239F65E3DB73069918BFB43FA275E0E22502
MD5 SHA1 SHA512 SSDEEP TLSH

linux arm