General
- Target hidakibest.mpsl.elf
- Size 141KB
- Sample240701-e2h4qazbjk
- SHA256 2855fd87da89cae077362a64212e958890708dddc84e409dc9db8a8e1894cd18
- MD5 691053c7315cc44d879fc74f4b5c76a9
- SHA1 5bf1f24b12e353d79dd638b45e4e5e3bfa99c892
- SHA512 1630c68509b19405450e164fc8d36d245f730ebf481187e8aacdb6700e54c4ae2827925fe699319ab3758a48bc9de7f6431f22457157eb7efd8bd4c3f648eedc
- SSDEEP 3072:lBXpqf9VHGn7vsd5htpRvHpVFm0/5ApYADn:llp4Wvsd5htvp7m0/5ASADn
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
hidakibest.mpsl.elf
Resource
debian12-mipsel-20240221-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
37.156.29.141:4258
Targets
-
- Target hidakibest.mpsl.elf
- Size 141KB
- SHA256 2855fd87da89cae077362a64212e958890708dddc84e409dc9db8a8e1894cd18
- MD5 691053c7315cc44d879fc74f4b5c76a9
- SHA1 5bf1f24b12e353d79dd638b45e4e5e3bfa99c892
- SHA512 1630c68509b19405450e164fc8d36d245f730ebf481187e8aacdb6700e54c4ae2827925fe699319ab3758a48bc9de7f6431f22457157eb7efd8bd4c3f648eedc
- SSDEEP 3072:lBXpqf9VHGn7vsd5htpRvHpVFm0/5ApYADn:llp4Wvsd5htvp7m0/5ASADn
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.