Overview

overview

10

Static

static

10

leviathan.ppc440.elf

ubuntu-18.04-amd64

leviathan.ppc440.elf

debian-9-armhf

leviathan.ppc440.elf

debian-9-mips

leviathan.ppc440.elf

debian-9-mipsel

Sharing

Copy URL Twitter E-mail

General

  • Target
    leviathan.ppc440.elf
  • Size 120KB
  • Sample261024-mc4m5aeg36
  • SHA256 dd9f2de148a4e974260ad1441e52d2206a9094189774caec8de819c5e203fad5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
botnetgafgyt

Malware Config

Extracted

Family

  • gafgyt

C2

  • 176.65.132.7:443

Signatures

  • Family: Gafgyt/Bashlite

    IoT botnet with numerous variants first seen in 2014.

    botnetgafgyt
  • Detected Gafgyt variant 1 IoCs

File Explorer

  • leviathan.ppc440.elf
    .elf 120KB

leviathan.ppc440.elf

  • SHA256 dd9f2de148a4e974260ad1441e52d2206a9094189774caec8de819c5e203fad5
  • MD5 SHA1 SHA512 SSDEEP TLSH
linuxppc

  • Detected Gafgyt variant