Overview

overview

10

Static

static

10

kworker.elf

debian-12-armhf

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    kworker.elf
  • Size 170KB
  • Sample261007-wpflhasygt
  • SHA256 3e724458a4b817aad81a70746f397fc4830da3ab02d465f53dcf8e6af9a8391e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
botnetgafgyt

Malware Config

Extracted

Family

  • gafgyt

C2

  • 64.89.161.96:55487

Signatures

  • Family: Gafgyt/Bashlite

    IoT botnet with numerous variants first seen in 2014.

    botnetgafgyt
  • Detected Gafgyt variant 1 IoCs

File Explorer

  • kworker.elf
    .elf 170KB

kworker.elf

  • SHA256 3e724458a4b817aad81a70746f397fc4830da3ab02d465f53dcf8e6af9a8391e
  • MD5 SHA1 SHA512 SSDEEP TLSH
linuxarm

  • Detected Gafgyt variant