flylegitbot | iran[.]arc[.]elf

General

Target
iran.arc.elf
Size 137KB
Sample261012-3qnrtss1d1
SHA256 c1143b3a3e7852a30fc7b2e1a74cde2a0bf7739c80398dfc97e7dd851eaeac43
MD5 681a2e6f21384c9e397e6e5f5486d6df
SHA1 4355cda68c4f14ce503aaf3b8245963a3e06dd51
SHA512 0de5d11afee007e27c3f675ad4248ff68d5c95dc5d99ed1c9578183a793756836e2c4f5e752775649b34cb1fce4b12abe9ae2a0efdbf6394121465c65212608e
SSDEEP 3072:sXeHcxur/bqPbHRYEiub/r7w5sqUYoFgvCXAVAWSrq:sXeHcxszoYwbjE/Up4CXAVcq
TLSH
T133D3AFA7B74BA090C8E44BF417CB5B9D293721009E6798F67D2E36391A779CB18073D2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects FlyLegitBot 1 IoCs

resource	yara_rule
sample	family_flylegitbot

SHA256 c1143b3a3e7852a30fc7b2e1a74cde2a0bf7739c80398dfc97e7dd851eaeac43
MD5 681a2e6f21384c9e397e6e5f5486d6df
SHA1 4355cda68c4f14ce503aaf3b8245963a3e06dd51
SHA512 0de5d11afee007e27c3f675ad4248ff68d5c95dc5d99ed1c9578183a793756836e2c4f5e752775649b34cb1fce4b12abe9ae2a0efdbf6394121465c65212608e
SSDEEP 3072:sXeHcxur/bqPbHRYEiub/r7w5sqUYoFgvCXAVAWSrq:sXeHcxszoYwbjE/Up4CXAVcq
TLSH
T133D3AFA7B74BA090C8E44BF417CB5B9D293721009E6798F67D2E36391A779CB18073D2
MD5 SHA1 SHA512 SSDEEP TLSH

linux