Behavioral task
behavioral1
Sample
hidakibest.arm6.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
hidakibest.arm6.elf
-
Size
150KB
-
MD5
c131c7928203e6a4635c9b34a0ad08f4
-
SHA1
01e43f0b71a90a4cf2bb6597ea930529744c7d02
-
SHA256
3d57adb9e73ece5bc8200166a25331c9b248ae40b94567d2c5089522fb0b9438
-
SHA512
d878f017eac3294ef86d15764f8056f021a4bbc665762441cfc90a54a2c92d9136899190226bd1794875c5ac07dd88bd9e4f7ebd0076cd702fb7187ec0da9789
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAw5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDTx5hWTGZWYxVldmpwTsLS
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.177.25.101:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
hidakibest.arm6.elf.elf linux arm