gafgyt | jaffacakes118_33849c8e2b9a51d3013ce1f24efb4e18453f5e549b70e60291bd7793a1436e5c[.]bin

General

Target
jaffacakes118_33849c8e2b9a51d3013ce1f24efb4e18453f5e549b70e60291bd7793a1436e5c.bin
Size 169KB
Sample260922-jfydqsba83
SHA256 33849c8e2b9a51d3013ce1f24efb4e18453f5e549b70e60291bd7793a1436e5c
MD5 a4593a76ef0de2b79c22b60e1052441c
SHA1 5715247918dedddf49e7724f478f02d956968272
SHA512 5a6010cfe0d3478ee977ad1a674d2a4b812356a898a95af28b5d181cb9a07bf584d52fad0fbb5535a033c39b7d39d58cd16cbf771ef82c74653dd5d151486049
SSDEEP 3072:3BMhRDGSdgwnbMGkLaYhWGT52yX8LMyxa4sj7iVTlimPs0ao8UtKFX:3BMnqSdBkLbhWGT5zyxRfVTMmPs0ao8X
TLSH
T1D304A68FA851DF1BE85F663A56970120BBFAA2DD294201327333B8526F770D159FAF10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet gafgyt

Family

C2

Family: Gafgyt/Bashlite
IoT botnet with numerous variants first seen in 2014.
botnet gafgyt

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

jaffacakes118_33849c8e2b9a51d3013ce1f24efb4e18453f5e549b70e60291bd7793a1436e5c.bin

.elf 169KB

SHA256 33849c8e2b9a51d3013ce1f24efb4e18453f5e549b70e60291bd7793a1436e5c
MD5 a4593a76ef0de2b79c22b60e1052441c
SHA1 5715247918dedddf49e7724f478f02d956968272
SHA512 5a6010cfe0d3478ee977ad1a674d2a4b812356a898a95af28b5d181cb9a07bf584d52fad0fbb5535a033c39b7d39d58cd16cbf771ef82c74653dd5d151486049
SSDEEP 3072:3BMhRDGSdgwnbMGkLaYhWGT52yX8LMyxa4sj7iVTlimPs0ao8UtKFX:3BMnqSdBkLbhWGT5zyxRfVTMmPs0ao8X
TLSH
T1D304A68FA851DF1BE85F663A56970120BBFAA2DD294201327333B8526F770D159FAF10
MD5 SHA1 SHA512 SSDEEP TLSH

linux