General

  • Target
    leviathan.arm4.elf
  • Size 133KB
  • Sample261024-mc4ccsa15r
  • SHA256 e43dc4bc7e0f09e409ab641af90e41ed761d61d548a42abafe1d9cb90f4e9fd5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • gafgyt

C2
  • 176.65.132.7:443

Signatures

  • Family: Gafgyt/Bashlite

    IoT botnet with numerous variants first seen in 2014.

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Detected Gafgyt variant 1 IoCs
  • Mirai ARM payload 1 IoCs

File Explorer

  • leviathan.arm4.elf
    .elf 133KB

leviathan.arm4.elf

  • SHA256 e43dc4bc7e0f09e409ab641af90e41ed761d61d548a42abafe1d9cb90f4e9fd5
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detected Gafgyt variant

  • Mirai ARM payload