Behavioral task
behavioral1
Sample
hidakibest.arm5.elf
Resource
debian9-armhf-20240611-en
2 signatures
150 seconds
General
-
Target
hidakibest.arm5.elf
-
Size
150KB
-
MD5
d3ab6bb3ffa8a92d9563cab807038bd9
-
SHA1
5e458a610abedc9d5687d005cf0b5e199b9d2bf9
-
SHA256
4be795fa4fc3ed3d66aaddb6341024ad98e25b007f6f0aa180e4b263d215c03b
-
SHA512
ed1734bb0a72f05fd6c0fcd29aa1af49f0d020c31fc9b96a24a502cb4870b01de7b7136a207ee160c024a6c2ac68569994deebad82a6755c35552e757936f3cc
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAc5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDT95hWTGU2WV7ldmpwTsLS
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
64.188.99.14:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
hidakibest.arm5.elf.elf linux arm