General
- Target hidakibest.mips.elf
- Size 141KB
- Sample240701-e2h4qazbjj
- SHA256 586b10745fd2cb6c886f286a69715474ed843a6300328dab1de03f07c027b572
- MD5 359d47e9217c3c18f517d4b6c43846fc
- SHA1 caa7003cf85c8b3c7b2bd89e91b0a7c506d55f4e
- SHA512 ff23d3ab4e6aaa0ba7829f240543079c45dbbe490feb13452d37293a74c5f73577482c6379140143ff42fa86e8544d638dc7e727d398627f44ae1aad4a6299d5
- SSDEEP 3072:sGGNZfCos2pA4FCF5hvikTam0/5ApYADn:hACyK40F5hvi9m0/5ASADn
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
hidakibest.mips.elf
Resource
debian9-mipsbe-20240611-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
37.156.29.141:4258
Targets
-
- Target hidakibest.mips.elf
- Size 141KB
- SHA256 586b10745fd2cb6c886f286a69715474ed843a6300328dab1de03f07c027b572
- MD5 359d47e9217c3c18f517d4b6c43846fc
- SHA1 caa7003cf85c8b3c7b2bd89e91b0a7c506d55f4e
- SHA512 ff23d3ab4e6aaa0ba7829f240543079c45dbbe490feb13452d37293a74c5f73577482c6379140143ff42fa86e8544d638dc7e727d398627f44ae1aad4a6299d5
- SSDEEP 3072:sGGNZfCos2pA4FCF5hvikTam0/5ApYADn:hACyK40F5hvi9m0/5ASADn
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.