General

  • Target

    hidakibest.arm5.elf

  • Size

    150KB

  • MD5

    d3ab6bb3ffa8a92d9563cab807038bd9

  • SHA1

    5e458a610abedc9d5687d005cf0b5e199b9d2bf9

  • SHA256

    4be795fa4fc3ed3d66aaddb6341024ad98e25b007f6f0aa180e4b263d215c03b

  • SHA512

    ed1734bb0a72f05fd6c0fcd29aa1af49f0d020c31fc9b96a24a502cb4870b01de7b7136a207ee160c024a6c2ac68569994deebad82a6755c35552e757936f3cc

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAc5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDT95hWTGU2WV7ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

64.188.99.14:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • hidakibest.arm5.elf
    .elf linux arm