General

  • Target

    hidakibest.arm5.elf

  • Size

    150KB

  • MD5

    65160e5914176a8c073c8808c0f37267

  • SHA1

    52922ebec813c79a6debb17bd9aff2f300006ee3

  • SHA256

    2f77809b11228f73d044c6eac5292759b659b00e89a9e76b1a8cd3f0d74d53d6

  • SHA512

    a0dad8aabe1db3838f24a034812e17e96ec424d4edc72044ee2aeb22f933589ca8a35f6cc805fbc8c2eea7cc516322a77f83cc4437e1c58fd7de78f13dfa1589

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTA95hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTI5hWTGU2WV7ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.8.22.109:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • hidakibest.arm5.elf
    .elf linux arm