General

  • Target

    hidakibest.arm6.elf

  • Size

    150KB

  • MD5

    91611d3c52443be597a849eec33f13de

  • SHA1

    539ac5fc32376b47a3758453e1180d051d765471

  • SHA256

    c9c6db1058b3d086d78188b000b0cf78513a5f1d7fa72eadaa7bce26db0c5826

  • SHA512

    0346bfba625009233b61853317a544886fe82a1ed47104f44e0b8a7b066be836ae4276bd12a87a4a63898b5a4f8cd34e49f44201100d4712c33dd9d1b0a96c46

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAc5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDT95hWTGZWYxVldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

64.188.99.14:4258

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • hidakibest.arm6.elf
    .elf linux arm