Behavioral task
behavioral1
Sample
hoodlum.arm5.elf
Resource
debian12-armhf-20240221-en
14 signatures
150 seconds
General
-
Target
hoodlum.arm5.elf
-
Size
176KB
-
MD5
2b53d328406f21f18f0930ce47556dca
-
SHA1
becfbb4b3a4c072f51e0080922de28aebeb3ef71
-
SHA256
10962293ec817a48997b8d2c9e4a43610373a35fe7360937f261e5d278fdef7e
-
SHA512
81107e7c660809fde0c6740412a2570b9275d0024cef2766fe2f730d4391c709fcf76e5d06aa8162bd6a43eb9dd8700de09151610147037a75443bf75bb6db0e
-
SSDEEP
3072:NBx2mxpI1Tzhm4yjeBaHX2b+/h81pNV2OnZW5hBL22WJV70+w2mowhbRWz3e:NJCBaHX2bE81sOng5hBL22WJV70p2mo8
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
37.44.238.66:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
hoodlum.arm5.elf.elf linux arm