General
- Target hidakibest.mips.elf
- Size 141KB
- Sample240702-e5d9yazcll
- SHA256 9cf7a4a95899e2a7558441fe4d80b10b4f4860b16514efccfa5062cb8a79300a
- MD5 86a1e077142622a1d81b569808bb5fea
- SHA1 57474ff340e15ffb3027b8734648034d456b25ae
- SHA512 beab7f2c6fabc0ac2126c324d3aa5d3ae3e72e78a4b84d4dcb5d87da891e9694df2406d02f3084685a4efabb1e73b3e381d8d41b175088a5c4e861b63ea3286b
- SSDEEP 3072:sGGNZfCos2pA4FCV5hvikTam0/5ApYADn:hACyK40V5hvi9m0/5ASADn
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
hidakibest.mips.elf
Resource
debian9-mipsbe-20240611-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
45.93.200.174:4258
Targets
-
- Target hidakibest.mips.elf
- Size 141KB
- SHA256 9cf7a4a95899e2a7558441fe4d80b10b4f4860b16514efccfa5062cb8a79300a
- MD5 86a1e077142622a1d81b569808bb5fea
- SHA1 57474ff340e15ffb3027b8734648034d456b25ae
- SHA512 beab7f2c6fabc0ac2126c324d3aa5d3ae3e72e78a4b84d4dcb5d87da891e9694df2406d02f3084685a4efabb1e73b3e381d8d41b175088a5c4e861b63ea3286b
- SSDEEP 3072:sGGNZfCos2pA4FCV5hvikTam0/5ApYADn:hACyK40V5hvi9m0/5ASADn
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.