Overview

overview

10

Static

static

10

systemd

ubuntu-18.04-amd64

systemd

debian-9-armhf

systemd

debian-9-mips

systemd

debian-9-mipsel

Sharing

Copy URL Twitter E-mail

General

  • Target
    systemd
  • Size 108KB
  • Sample260916-w79bjayw2l
  • SHA256 1230e9f46714a05450ba6ce284038ba3fde3ebfdd4cce8a49ad5cd1069efad19
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
botnetgafgyt

Malware Config

Extracted

Family

  • gafgyt

C2

  • 64.89.160.222:55487

Signatures

  • Family: Gafgyt/Bashlite

    IoT botnet with numerous variants first seen in 2014.

    botnetgafgyt
  • Detected Gafgyt variant 1 IoCs

File Explorer

  • systemd
    .elf 108KB

systemd

  • SHA256 1230e9f46714a05450ba6ce284038ba3fde3ebfdd4cce8a49ad5cd1069efad19
  • MD5 SHA1 SHA512 SSDEEP TLSH
linuxsparc

  • Detected Gafgyt variant