gafgyt | a-r[.]m-4[.]Sakura

General

Target
a-r.m-4.Sakura
Size 105KB
Sample260928-pltkmatdja
SHA256 4e41dd913a15853e831ed027612ac3e7dfed8a79611fe622c32dcf9740708c88
MD5 47b8c8d7f35ef6663c7c49822e1e8222
SHA1 b559635fe479757c573342297dc8f45ba7779094
SHA512 392b9e0cda8634e347e178931c6b1ab1948fb03beb89a46a280a2846593f7e5d7ddcfbcb5e59825b2e667e18633a532791ee93e03214f558a3d9ad22d0bce0fa
SSDEEP 3072:cSF+86m9qW6osRhPzeJA5AmkZrQAhPDCXFke:h6moW69RhPamkZrQAhPDCXFke
TLSH
T167B31845F840872BC3D327BAE78F479D3B36579467DB33116938BEB42BC17892A29520
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet gafgyt

Family: Gafgyt/Bashlite
IoT botnet with numerous variants first seen in 2014.
botnet gafgyt

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

SHA256 4e41dd913a15853e831ed027612ac3e7dfed8a79611fe622c32dcf9740708c88
MD5 47b8c8d7f35ef6663c7c49822e1e8222
SHA1 b559635fe479757c573342297dc8f45ba7779094
SHA512 392b9e0cda8634e347e178931c6b1ab1948fb03beb89a46a280a2846593f7e5d7ddcfbcb5e59825b2e667e18633a532791ee93e03214f558a3d9ad22d0bce0fa
SSDEEP 3072:cSF+86m9qW6osRhPzeJA5AmkZrQAhPDCXFke:h6moW69RhPamkZrQAhPDCXFke
TLSH
T167B31845F840872BC3D327BAE78F479D3B36579467DB33116938BEB42BC17892A29520
MD5 SHA1 SHA512 SSDEEP TLSH

linux arm