Behavioral task
behavioral1
Sample
hidakibest.arm5.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
2 signatures
150 seconds
General
-
Target
hidakibest.arm5.elf
-
Size
150KB
-
MD5
65160e5914176a8c073c8808c0f37267
-
SHA1
52922ebec813c79a6debb17bd9aff2f300006ee3
-
SHA256
2f77809b11228f73d044c6eac5292759b659b00e89a9e76b1a8cd3f0d74d53d6
-
SHA512
a0dad8aabe1db3838f24a034812e17e96ec424d4edc72044ee2aeb22f933589ca8a35f6cc805fbc8c2eea7cc516322a77f83cc4437e1c58fd7de78f13dfa1589
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTA95hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTI5hWTGU2WV7ldmpwTsLS
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.8.22.109:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
hidakibest.arm5.elf.elf linux arm