General

  • Target

    hidakibest.arm6.elf

  • Size

    150KB

  • MD5

    5b55f52e53d5a18e413d2b9fbb5d219d

  • SHA1

    a79750e7de80072161e03327bacb8d1f69684710

  • SHA256

    20151c4357e23a9847d05ad898ab552b20f6cb122f1f0e556f07623d2b39b5e3

  • SHA512

    4b5f2752427e1a11f6497167ae23fd62f52ae02f4c6b82cfd58582d142cb4d7515895c4a80769053a23dc2b3d48ef7204ea7ae0e5edc5c582eee02477c3dae20

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAU5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDTZ5hWTGZWYxVldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

78.153.149.103:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • hidakibest.arm6.elf
    .elf linux arm