Behavioral task
behavioral1
Sample
hidakibest.arm4.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
hidakibest.arm4.elf
-
Size
112KB
-
MD5
d62bba1403b60d0ec2d89aee811fde3b
-
SHA1
b7e527f02980b84eb2fa430d7b86e56a2a45c46d
-
SHA256
e674c1ea983d2c7038522a14b81ff1b733ef5a6603993d114306bf7b901f091b
-
SHA512
5eac98008101332b3b147606ee74dc027c6d44d288f76c36030ddcd275838515cecdd3e06eb62dcc1d64153f5621d062a7dd8e656958695b6f306c9975af5328
-
SSDEEP
3072:vhfviOui5FCRSUaVejY68tS5hqSr3hGm0Qxu1bXWIn:pvfUQVejYXtS5hqSr3hGm0Qxu1rWIn
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
172.234.21.34:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
hidakibest.arm4.elf.elf linux arm