Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
hidakibest.mpsl.elf
-
Size
141KB
-
Sample
240821-qq9cbathjn
-
MD5
7a44e746f0b4434f5a223b7926e987b0
-
SHA1
4a5e687d03d2e47ce54176dccf2567793044eaf3
-
SHA256
ec79556b69a727c10dde9ca91f6164deb004ec4467535ea51c292a85cdd6f6ef
-
SHA512
88962a98377f78c22264d5c51e340619b7b2460b9cfe0b23fa8d2727339844c508017bcfa75bec5b961878260c5bd557fb8db0507ca6efd3a77f8089bcfe6030
-
SSDEEP
3072:lBXpqf9VHGn7vsf5htpRvHpVFm0/5ApYADn:llp4Wvsf5htvp7m0/5ASADn
Behavioral task
behavioral1
Sample
hidakibest.mpsl.elf
Resource
debian12-mipsel-20240221-en
Malware Config
Extracted
gafgyt
5.59.248.206:4258
Targets
-
-
Target
hidakibest.mpsl.elf
-
Size
141KB
-
MD5
7a44e746f0b4434f5a223b7926e987b0
-
SHA1
4a5e687d03d2e47ce54176dccf2567793044eaf3
-
SHA256
ec79556b69a727c10dde9ca91f6164deb004ec4467535ea51c292a85cdd6f6ef
-
SHA512
88962a98377f78c22264d5c51e340619b7b2460b9cfe0b23fa8d2727339844c508017bcfa75bec5b961878260c5bd557fb8db0507ca6efd3a77f8089bcfe6030
-
SSDEEP
3072:lBXpqf9VHGn7vsf5htpRvHpVFm0/5ApYADn:llp4Wvsf5htvp7m0/5ASADn
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-