Behavioral task
behavioral1
Sample
hidakibest.arm7.elf
Resource
debian9-armhf-20240729-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
hidakibest.arm7.elf
-
Size
150KB
-
MD5
a9e8aed501581457176b6888a2802ef4
-
SHA1
4f45bf39d0ea12796e2a5379cb3fa801ae7f81f5
-
SHA256
cea8fcba38cc7862264e8a572ae167ddf887e1ab359bd09a94b3c027e6089ad1
-
SHA512
7147a1e208ea671e3d3253311ac145d15681ba1217d3bccaff89647a0498805ffa0a14d48bc1d304349187a34fc5c076312ec449a7056760669ab3a527ec2067
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAt5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDT45hWTGHIM/9ldmpwTsLS
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
166.88.225.38:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
hidakibest.arm7.elf.elf linux arm