Behavioral task
behavioral1
Sample
hidakibest.arm5.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
hidakibest.arm5.elf
-
Size
150KB
-
MD5
1b8f4843dd6df6374c23b04c7c5538be
-
SHA1
b9f0a88db5b015bf605095f4ca0651db5fc71999
-
SHA256
f2fd97aba6b540851480818f6623bbb6d35757437c387a2e174c7c5398ed2493
-
SHA512
d2c67693cb35f05a6a89e9c7425dd2d037ba51139cad061ec4e5246e2a682a807b5bd3688a4b201b9d1b132521759563526d63e5b570276b5119c0feba91bf86
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAJ5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTc5hWTGU2WV7ldmpwTsLS
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.131.108.84:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
hidakibest.arm5.elf.elf linux arm