leviathan.arm5.elf
- SHA256 384f6102f832c8275043e227cd628da323968fe0cb7b9bce68be4568f55dfea7
-
Detected Gafgyt variant
-
Mirai ARM payload
General
- Target leviathan.arm5.elf
- Size 128KB
- Sample261024-mc32laa15q
- SHA256 384f6102f832c8275043e227cd628da323968fe0cb7b9bce68be4568f55dfea7
Score
10/10
Malware Config
Extracted
Family
-
gafgyt
C2
-
176.65.132.7:443
Signatures
- Family: Gafgyt/Bashlite
IoT botnet with numerous variants first seen in 2014.
- Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
- Detected Gafgyt variant 1 IoCs
- Mirai ARM payload 1 IoCs
File Explorer
-
leviathan.arm5.elf