General

  • Target

    hidakibest.arm6.elf

  • Size

    150KB

  • MD5

    d08e62d100bce34cc5cb3fb7c559cd63

  • SHA1

    cf081f66d650bf7a10c095ced4014f1236ae1964

  • SHA256

    1389c50dcf0dda81905ca7ec1822c09e392474f30bd6b35fc75eea7d75948ca5

  • SHA512

    63ee11d14d25cc2fdb033e725353d85056633445dc69752d85ec15b0e989c94d14059cfb08fb3c75ca26d4097ee550af781d1bf4ecc8fb1efb58f0bab7efbf3d

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTA85hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDTR5hWTGZWYxVldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

212.80.18.246:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • hidakibest.arm6.elf
    .elf linux arm