General

  • Target

    fruit.arm7.elf

  • Size

    150KB

  • MD5

    3e3324c430caca52b7b5fdee3cb05200

  • SHA1

    61fce2b8bbbec6b3d8daed9142c4be019e9e5138

  • SHA256

    764c23b484e3f181fcb13dd8df2a6ce4f2ade4070cec254358fd3d2f8115c4c8

  • SHA512

    814dc21b9528fddb250c0955fad2c74e2863e20765cdac978ad6a109d9a35409ae93cf4b71e2e98c293e06d711e6bc3cdf606c1871206c70d7b7626e0d5919db

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAy5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDTD5hWTGHIM/9ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.177.25.107:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • fruit.arm7.elf
    .elf linux arm