Behavioral task
behavioral1
Sample
hidakibest.arm5.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
hidakibest.arm5.elf
-
Size
150KB
-
MD5
2019d6f3ca9696122b2a46bde0c22e9a
-
SHA1
8e95db4f407919b1bed25258b2ab7af56e2a0c52
-
SHA256
983e19517ae90c2905a1c5071e1afa031d6cfce9d2377ceb74c45dc2e086625b
-
SHA512
10d7899176eeb63acba225484db1b2102c80e3ac8dabd6314476f583984c0258d3624a9d885af5d42bda0f7ddada102217a0a464d4a86ba72bb6d8d77b7a7d7b
-
SSDEEP
3072:/dQbnQao0HawD+zQNz7gb5hZ1GU2WV7kxHmpwTsL/QMyn:VmQao0H3D9z7+5hZ1GU2WV7kNmpwTsLS
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.212.148.212:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
hidakibest.arm5.elf.elf linux arm