Behavioral task
behavioral1
Sample
hidakibest.arm7.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
2 signatures
150 seconds
General
-
Target
hidakibest.arm7.elf
-
Size
150KB
-
MD5
5e3d9f136b6f8678a296c7ac32584b66
-
SHA1
670c65c0d58ae9b251403b26182d7ac92ca6d0b1
-
SHA256
b60475b4eec388c349074f1972d7622ccd299a4b363d43dc22ad9a2c4bec0235
-
SHA512
52e4feb9530efd9926adbd8551d5958c7de7978e1bcb0e36a32eabd57af3b691364a9aa6c838d04f5bf1bfc498f8438e74fe6a613eb90ffeed7b00c6c67f9869
-
SSDEEP
3072:/dQbnQao0HawD+zQNz7gb5hZ1GHJWM/9kxHmpwTsL/QMyn:VmQao0H3D9z7+5hZ1GHIM/9kNmpwTsLS
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.212.148.212:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
hidakibest.arm7.elf.elf linux arm