Behavioral task
behavioral1
Sample
hidakibest.arm5.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
2 signatures
150 seconds
General
-
Target
hidakibest.arm5.elf
-
Size
150KB
-
MD5
22d881996e440c1e4d0efb615ae41dd0
-
SHA1
b50c5d04b425bacd93b7ed41656f19e700c45693
-
SHA256
d394bb435740866b64aa1779398956ecd0c5f648c10aa18264e783706d08b77c
-
SHA512
3c7e96e7cf13246708de6dc7fee8cd5bdecefe07ee10e381abf00030d0763e50cbbae588ffd29736dfaca43c39bb97b1e1e9c5687889975aada0119f47cbd707
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAL5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTK5hWTGU2WV7ldmpwTsLS
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
49.0.254.78:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
hidakibest.arm5.elf.elf linux arm