General

  • Target

    hidakibest.arm5.elf

  • Size

    150KB

  • MD5

    22d881996e440c1e4d0efb615ae41dd0

  • SHA1

    b50c5d04b425bacd93b7ed41656f19e700c45693

  • SHA256

    d394bb435740866b64aa1779398956ecd0c5f648c10aa18264e783706d08b77c

  • SHA512

    3c7e96e7cf13246708de6dc7fee8cd5bdecefe07ee10e381abf00030d0763e50cbbae588ffd29736dfaca43c39bb97b1e1e9c5687889975aada0119f47cbd707

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAL5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTK5hWTGU2WV7ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

49.0.254.78:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • hidakibest.arm5.elf
    .elf linux arm