Overview

overview

10

Static

static

10

hidakibest.mips.elf

debian-9-mips

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    hidakibest.mips.elf

  • Size

    141KB

  • Sample

    240902-e6hzhs1grn

  • MD5

    96edc2bb63c60080a01c49420066e06a

  • SHA1

    d0e579a8cdfaf628526077bd033c086e1579723f

  • SHA256

    2a9bc822a567acd10d811144d0c9094c82bbd469400cf0f5d6d2347e9ea476ca

  • SHA512

    612d795cb4d4e6d4015910a14b2ab64161cd5ab29b55afb1ca30943a522bfa921df4af6f85eaf440ca3c2de282517b6b972d3a5b57b169736d2498d86ffaafe7

  • SSDEEP

    3072:sGGNZfCos2pA4FCv5hvikTam0/5ApYADn:hACyK40v5hvi9m0/5ASADn

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

45.8.22.109:4258

Targets

    • Target

      hidakibest.mips.elf

    • Size

      141KB

    • MD5

      96edc2bb63c60080a01c49420066e06a

    • SHA1

      d0e579a8cdfaf628526077bd033c086e1579723f

    • SHA256

      2a9bc822a567acd10d811144d0c9094c82bbd469400cf0f5d6d2347e9ea476ca

    • SHA512

      612d795cb4d4e6d4015910a14b2ab64161cd5ab29b55afb1ca30943a522bfa921df4af6f85eaf440ca3c2de282517b6b972d3a5b57b169736d2498d86ffaafe7

    • SSDEEP

      3072:sGGNZfCos2pA4FCv5hvikTam0/5ApYADn:hACyK40v5hvi9m0/5ASADn

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks