General

  • Target

    hidakibest.arm4.elf

  • Size

    112KB

  • MD5

    f2d880cba4f10465f14a85e6f6ae703a

  • SHA1

    e4d1a81b72681a311191c4846497e508b8a402dc

  • SHA256

    9b4b0c9518ac8aa6fe323e2daf1f8ca4462f2a05ff7b92217cf496abede771a6

  • SHA512

    0ade76fe20758af42a1dac242e4f8b8ea7df0466b0e0ab67a37f6952cebabba738e9d8d92cc4cb3a380c73e4ad1f3043360e2fa90b09b84082eb2a628a1930eb

  • SSDEEP

    3072:vhfviOui5FCRSUaVejY68tc5hqSr3hGm0Qxu1bXWIn:pvfUQVejYXtc5hqSr3hGm0Qxu1rWIn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

5.59.248.206:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • hidakibest.arm4.elf
    .elf linux arm