General

  • Target

    pl.arm5.elf

  • Size

    146KB

  • MD5

    d14285a87bbd1e2ac04c0f856d3b84ca

  • SHA1

    23600623f7e5a4a2ffb544539dee895a07f78b7e

  • SHA256

    df630085cc7620f807a43b39e796b1ebdd80ca82589c61bb066d2e8d465e6316

  • SHA512

    6ae4dbf532f0e9d0dca6517cb20d1f3da86a6bd2804f9977508a4ee3162b2ee441435b9b5ac596ac697c29210e6c34b6337693fed85169f748c9f458bc79e4c9

  • SSDEEP

    3072:ut8iFDKEfFN+Fa+1sWHh7a8oXV7pUMbmQwfCMQiGW:s8iFDLf/+FaNqh7a8oXV7p5mQwfCDiGW

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

141.98.115.226:808

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • pl.arm5.elf
    .elf linux arm