flylegitbot | iran[.]armv6l[.]elf

General

Target
iran.armv6l.elf
Size 147KB
Sample261012-3jvxkact5l
SHA256 a30d908237853ef035449d6236f2e817fdfcc280fab60609de6f7cc36f1c1be8
MD5 94bba4db23d0f18bc39fcc271c05dae4
SHA1 9f80723a6b661afa2e073c72ee3d4992d142232e
SHA512 464fce52bc8ad358e203998490464b0a740e2571fea173cddaca40c03c2d1ae0f69807526e9ec7fa416e04d750e63fe0326898d5cdb88c8d8920b03a248d1786
SSDEEP 3072:taJ3jzteAUVukEEX/zOHUmSaqVFFfWMHTIGnlJgMyxSW:taJ3jzt3WQEX/aHUlaoFnIGnrgMyxSW
TLSH
T17CE32B16F9819B11D5C152BAFE0E528D77231B7CE2DE72029D24AF347B8B87B0E3A415
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects FlyLegitBot 1 IoCs

resource	yara_rule
sample	family_flylegitbot

SHA256 a30d908237853ef035449d6236f2e817fdfcc280fab60609de6f7cc36f1c1be8
MD5 94bba4db23d0f18bc39fcc271c05dae4
SHA1 9f80723a6b661afa2e073c72ee3d4992d142232e
SHA512 464fce52bc8ad358e203998490464b0a740e2571fea173cddaca40c03c2d1ae0f69807526e9ec7fa416e04d750e63fe0326898d5cdb88c8d8920b03a248d1786
SSDEEP 3072:taJ3jzteAUVukEEX/zOHUmSaqVFFfWMHTIGnlJgMyxSW:taJ3jzt3WQEX/aHUlaoFnIGnrgMyxSW
TLSH
T17CE32B16F9819B11D5C152BAFE0E528D77231B7CE2DE72029D24AF347B8B87B0E3A415
MD5 SHA1 SHA512 SSDEEP TLSH

linux arm