General
- Target hidakibest.x86.elf
- Size 106KB
- Sample240701-e2jegszbjq
- SHA256 e7f994410e4ac997ea931e2f513806781d8d59d5d071189cc26edc345782c4e1
- MD5 c33d141a8ee2aee1ddbab334c6cc6319
- SHA1 09568a84c28cfb4a0bba45c71706e9162fb8a878
- SHA512 a237af19f979fff046ed0b90778b06606cbc494a5c068fbb4b38ee0f257a62e01a80e61fec767d6a3a86b2b9baad87f47377acb682164d5b25d472f217def131
- SSDEEP 3072:j6dye4BmJQephaZw/1vc4+AzkSXmdRWaLHgb4:dephaZchrmdRWaDgb4
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
hidakibest.x86.elf
Resource
ubuntu2204-amd64-20240611-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
37.156.29.141:4258
Targets
-
- Target hidakibest.x86.elf
- Size 106KB
- SHA256 e7f994410e4ac997ea931e2f513806781d8d59d5d071189cc26edc345782c4e1
- MD5 c33d141a8ee2aee1ddbab334c6cc6319
- SHA1 09568a84c28cfb4a0bba45c71706e9162fb8a878
- SHA512 a237af19f979fff046ed0b90778b06606cbc494a5c068fbb4b38ee0f257a62e01a80e61fec767d6a3a86b2b9baad87f47377acb682164d5b25d472f217def131
- SSDEEP 3072:j6dye4BmJQephaZw/1vc4+AzkSXmdRWaLHgb4:dephaZchrmdRWaDgb4
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.