Behavioral task
behavioral1
Sample
hidakibest.arm5.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
hidakibest.arm5.elf
-
Size
150KB
-
MD5
4a4904e2a861a3b1181d48a97a20e0a1
-
SHA1
49c3fcfaf0d8ee5e429b1d2a3717ef8d20a33651
-
SHA256
b101a75e8db5b23a67d9942e90c2bba636dc331abf8a3eec9f77eaaf2b41eda7
-
SHA512
b0f2a26e5dad50b3d31b86fa8dedb13eeeb89d7c652f25dce5e51aae4ca51bf71f02d7d9a402f4060c919dff195dca6bf4b0f1ca29e49d2bddaaa4957f96d623
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAD5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTW5hWTGU2WV7ldmpwTsLS
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.216.71.152:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
hidakibest.arm5.elf.elf linux arm