General

  • Target

    hidakibest.arm7.elf

  • Size

    150KB

  • MD5

    05f3e69af94ba2858f7a9c8c646a9620

  • SHA1

    73b411a2961ef068b13b4da32c922e172718aaef

  • SHA256

    850b16592f84f97f7610403f51108d3d3c284b14b31126819c74cd9330103d35

  • SHA512

    aaf75eba68dd4d6b9fff0bb0d7bb83639bb99fdfb5f9cc5d51c3e473949bf8b6f80002150b6db78e42e27595cdcb7c045fec1cfc9b5fff30e2892e187e3a9fd4

  • SSDEEP

    3072:/dQbnQao0HawD+zQNz7gv5hZ1GHJWM/9kxHmpwTsL/QMyn:VmQao0H3D9z7i5hZ1GHIM/9kNmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.103.102.219:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • hidakibest.arm7.elf
    .elf linux arm