General

  • Target

    hoodlum.arm5.elf

  • Size

    176KB

  • MD5

    2b53d328406f21f18f0930ce47556dca

  • SHA1

    becfbb4b3a4c072f51e0080922de28aebeb3ef71

  • SHA256

    10962293ec817a48997b8d2c9e4a43610373a35fe7360937f261e5d278fdef7e

  • SHA512

    81107e7c660809fde0c6740412a2570b9275d0024cef2766fe2f730d4391c709fcf76e5d06aa8162bd6a43eb9dd8700de09151610147037a75443bf75bb6db0e

  • SSDEEP

    3072:NBx2mxpI1Tzhm4yjeBaHX2b+/h81pNV2OnZW5hBL22WJV70+w2mowhbRWz3e:NJCBaHX2bE81sOng5hBL22WJV70p2mo8

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

37.44.238.66:23

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • hoodlum.arm5.elf
    .elf linux arm