Behavioral task
behavioral1
Sample
hidakibest.arm7.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
2 signatures
150 seconds
General
-
Target
hidakibest.arm7.elf
-
Size
150KB
-
MD5
a19a54546b06609ba0d76bc47685177d
-
SHA1
b3e13643cc69745440719a4d6fb133c0595d5b74
-
SHA256
0b68035ecd5e4c69cb36fa287bdea1934666ae6536982b82ce02ecec74bc7554
-
SHA512
3a6961dc42e5a5ac87c12d992c8e614d15cf211c2d05a406755416657768e83b32245ff5e6822e93c674594d078cd32447d8f6324972702aa7667bc457050365
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAJ5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDT85hWTGHIM/9ldmpwTsLS
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
166.88.225.34:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
hidakibest.arm7.elf.elf linux arm