Behavioral task
behavioral1
Sample
hidakibest.ppc.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
hidakibest.ppc.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
hidakibest.ppc.elf
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral4
Sample
hidakibest.ppc.elf
Resource
debian9-mipsel-20240729-en
General
-
Target
hidakibest.ppc.elf
-
Size
106KB
-
MD5
8a73cade501bee1c36b14908f7a45d24
-
SHA1
76d3dc3f6d6e65d837322f2e6b14a6277ed8fd44
-
SHA256
cd2853f240d9e4747fc9e33a8ebcbc137885d97631482c8a081b82b6c42c0b7b
-
SHA512
89a343c246acd94ce0344ea3b5eac6c243dc3837450021f92bd838b2c8d5cbad0e3998616c68ac0674a40f30934ff1a2a9e53625ba309f9ca3004ed1a3deb446
-
SSDEEP
3072:gQiBqcL95J6qEWLE3S/5h7wLYm7ArEfT3n:gQiBClWLr5hkEm7ArEfT3n
Malware Config
Extracted
gafgyt
185.177.25.101:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
hidakibest.ppc.elf.elf linux ppc