General

  • Target

    hidakibest.arm4.elf

  • Size

    112KB

  • MD5

    23500b89cd5ca65fc979137650e3e2a9

  • SHA1

    58eeb4681c9785322a7cb6392d4369b08c152457

  • SHA256

    ef52978924ccf8bb430a5ec0d3e6a6157b303e2ddbd3384bc739bcbaa6a4082c

  • SHA512

    deb9dd9109a816e2e2a4510f4140852ae694d60fc1d1f4a8c1a73741420e97733c7ceec799ce379a92b64be04e66ac800726c27579f21f6cfd20bddd6a05c294

  • SSDEEP

    3072:vhfviOui5FCRSUaVejY68th5hqSr3hGm0Qxu1bXWIn:pvfUQVejYXth5hqSr3hGm0Qxu1rWIn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

78.153.149.103:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • hidakibest.arm4.elf
    .elf linux arm