General

  • Target

    hidakibest.arm5.elf

  • Size

    150KB

  • MD5

    ea25ea5c762fca5b5690edb7b7a4e69a

  • SHA1

    c2d8656a6282989bee5a0a6632ca686507a6d45a

  • SHA256

    322653e2ed6782bfc6a610ed9f7d66a2736d3a7b67d318af38869a91eddd69b4

  • SHA512

    74e7c2fe82340fb868075626fbdff391be353ad0b1fb68f43ddd5e2a88a62bddcdcc04b41637b22e5f119703140337cfe1da10c7bc75c57de9193d7848f3b115

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTA85hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTt5hWTGU2WV7ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

134.122.80.157:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • hidakibest.arm5.elf
    .elf linux arm