Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

hidakibest.mpsl.elf

debian-12-mipsel

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    hidakibest.mpsl.elf

  • Size

    141KB

  • Sample

    240821-qq9cbathjn

  • MD5

    7a44e746f0b4434f5a223b7926e987b0

  • SHA1

    4a5e687d03d2e47ce54176dccf2567793044eaf3

  • SHA256

    ec79556b69a727c10dde9ca91f6164deb004ec4467535ea51c292a85cdd6f6ef

  • SHA512

    88962a98377f78c22264d5c51e340619b7b2460b9cfe0b23fa8d2727339844c508017bcfa75bec5b961878260c5bd557fb8db0507ca6efd3a77f8089bcfe6030

  • SSDEEP

    3072:lBXpqf9VHGn7vsf5htpRvHpVFm0/5ApYADn:llp4Wvsf5htvp7m0/5ASADn

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

5.59.248.206:4258

Targets

    • Target

      hidakibest.mpsl.elf

    • Size

      141KB

    • MD5

      7a44e746f0b4434f5a223b7926e987b0

    • SHA1

      4a5e687d03d2e47ce54176dccf2567793044eaf3

    • SHA256

      ec79556b69a727c10dde9ca91f6164deb004ec4467535ea51c292a85cdd6f6ef

    • SHA512

      88962a98377f78c22264d5c51e340619b7b2460b9cfe0b23fa8d2727339844c508017bcfa75bec5b961878260c5bd557fb8db0507ca6efd3a77f8089bcfe6030

    • SSDEEP

      3072:lBXpqf9VHGn7vsf5htpRvHpVFm0/5ApYADn:llp4Wvsf5htvp7m0/5ASADn

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks