gafgyt | hidakibest[.]mpsl[.]elf | Triage

Sharing

General

Target

hidakibest.mpsl.elf
Size

141KB
MD5

929cb47f8ba8b69ff18dcbc5bebb5064
SHA1

ad9202e20e47ba663986c5f42010558632d55bea
SHA256

eb976bcd473ce1d54a7f35d66b1ed7540ce276b57e6eb197758c6451d7cddfe9
SHA512

5313173b5bccd92a76d657560c6e5ac7179e4d40ee0715ee2cf9db52b693c1eacab0a7e638c4ffc091f19c8fbfdb6f8dae701f1120ce154e129fdfe58a66af15
SSDEEP

3072:lBXpqf9VHGn7vsD5htpRvHpVFm0/5ApYADn:llp4WvsD5htvp7m0/5ASADn

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

166.88.225.38:4258

Signatures

Detected Gafgyt variant 1 IoCs

Processes:

resource	yara_rule
sample	family_gafgyt

Gafgyt family
gafgyt

Files

hidakibest.mpsl.elf
.elf linux mipsel