flylegitbot | iran[.]armv5l[.]elf

General

Target
iran.armv5l.elf
Size 130KB
Sample261001-n1ymfsbb55
SHA256 665b418c0ed1145f6e18224dded3460d7a99fee7255b5657addf32f58714db7c
MD5 9c054880e33e3cc6102db3ad207ff245
SHA1 6b77cf7cd29f8d0efad42e7d30ddd32b1edd40b8
SHA512 b84b6c1ac57013d4466be630a4028599f5019753e75ef823c4d8564033c7599907ddf859d40cb880aa5e132713771bee5f2c9a5c115736d581a9cb02815f75b3
SSDEEP 3072:lBYlRO+ilm977xT1BksPfm4V+5v7/7OLebWIpPe:zYlRO+iQ7xRKN4VEv7DO6bWIpPe
TLSH
T16AD31A45FC515B16CAC622B7FF4E428D772A176CD2EE32039D256F20378B96B0E3A542
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects FlyLegitBot 1 IoCs

resource	yara_rule
sample	family_flylegitbot

SHA256 665b418c0ed1145f6e18224dded3460d7a99fee7255b5657addf32f58714db7c
MD5 9c054880e33e3cc6102db3ad207ff245
SHA1 6b77cf7cd29f8d0efad42e7d30ddd32b1edd40b8
SHA512 b84b6c1ac57013d4466be630a4028599f5019753e75ef823c4d8564033c7599907ddf859d40cb880aa5e132713771bee5f2c9a5c115736d581a9cb02815f75b3
SSDEEP 3072:lBYlRO+ilm977xT1BksPfm4V+5v7/7OLebWIpPe:zYlRO+iQ7xRKN4VEv7DO6bWIpPe
TLSH
T16AD31A45FC515B16CAC622B7FF4E428D772A176CD2EE32039D256F20378B96B0E3A542
MD5 SHA1 SHA512 SSDEEP TLSH

linux arm