General

  • Target

    hidakibest.arm4.elf

  • Size

    112KB

  • MD5

    8e483690f9332dc27317c3ef8654e91b

  • SHA1

    838c8b78bad5b49d3e5e4ffb4fa7027eb6d0a683

  • SHA256

    e435096af8b3129ceadb41e807d9e0bae59800c3ce7e9deb6ffda39f1430ac7c

  • SHA512

    96868535c426a11687ced684ccbbc039dda2499a47a0527ac839be315123312882a32bfe31831c7d6f79ff758e1343317ece41da4e3a9cf4d9b56fe2050b4729

  • SSDEEP

    3072:vhfviOui5FCRSUaVejY68tS5hqSr3hGm0Qxu1bXWIn:pvfUQVejYXtS5hqSr3hGm0Qxu1rWIn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

37.156.29.141:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • hidakibest.arm4.elf
    .elf linux arm