Behavioral task
behavioral1
Sample
hidakibest.arm4.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
0 signatures
150 seconds
General
-
Target
hidakibest.arm4.elf
-
Size
112KB
-
MD5
40b93365938ab7f928181cd7cd4a1bc0
-
SHA1
78ff805bcbb48ce089f80cc47f9cc9dc81f94c47
-
SHA256
38548bab729836106e23badebd80615fa95f17dcd461f15b47400e2fbe91c952
-
SHA512
81ff07efb002d97bed286fa63859a423bd0f8063a64a89f6abcf0c52b19bdd9f96888fa935a987e5e7d22bcd3c1755df3b0fa049888a5e8eac14b86625501a55
-
SSDEEP
3072:ULveOu+5FClWUaVeDYeQ1e5hiBrn1Gm0Qxu1bXWIn:6v78EVeDYH1e5hiBrn1Gm0Qxu1rWIn
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.212.148.212:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
hidakibest.arm4.elf.elf linux arm