Behavioral task
behavioral1
Sample
hidakibest.arm7.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
hidakibest.arm7.elf
-
Size
150KB
-
MD5
52d0ae13c857d4eb4234dc595722dccc
-
SHA1
8e38ea859ff096811f869980013931836a4b5be5
-
SHA256
504a1d38ce1c64c802409879813a4707e35d5e0123e077e197ff6ab14627bc1a
-
SHA512
dc8cbeb911cf55effdb0fd7fbc71fd388374bbc8b5e9ac7f8c616292934e61d8f696c48e76b514cb77ca34fed00c0b47a734fb1073c2579d09d96f88224a6665
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAD5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDTW5hWTGHIM/9ldmpwTsLS
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.216.71.152:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
hidakibest.arm7.elf.elf linux arm