General

  • Target

    felkawtf.armv5l.elf

  • Size

    98KB

  • MD5

    8535674657f705c68351fa19fc5855bf

  • SHA1

    3ab1506db10bc81ca6e0fa7a951cd534258381d4

  • SHA256

    c5fde61ed9167946475a31c564d3161cba8b0bada8d3ba0b2ed62801fda12c37

  • SHA512

    7b43ce29d87232e92c27b5483ef3c8c4fffe2c9c75a104983f93cf4440374e3c3c3453895edf7a0577fb0bbb07e4608fb2c6e6fc14db984fd1b3ef64957c848a

  • SSDEEP

    1536:QQ4SbcTp6kYPfmzekyIMCB0xtOIyIJPQIP6HzmRPqQ4b/XAhhYQ:hcUkWk/B0bJPQTmRPqQ4bvAhhYQ

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

15.204.128.30:6140

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • felkawtf.armv5l.elf
    .elf linux arm