General

  • Target

    hidakibest.mips.elf

  • Size

    141KB

  • Sample

    240930-xc6slaterb

  • MD5

    a19235f98fbb6e1954ca0c6461cc51e3

  • SHA1

    6c5db7576216aebc4c0a4fd3d4a4bf9cd5a46b2a

  • SHA256

    d38b2dfbb0d25eee7ad645ad161e59db04acd24cc3afd7534b53de2d40399236

  • SHA512

    5844381f4dd95b95142df789404006ddd0f3f634bbdfc366905bc8e6b2a6374c74ec70e7d3097147b01a07cc685a16c81622ed1fd2693419530ae47c790f3803

  • SSDEEP

    3072:sGGNZfCos2pA4FC+5hvikTam0/5ApYADn:hACyK40+5hvi9m0/5ASADn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

62.109.28.31:4258

Targets

    • Target

      hidakibest.mips.elf

    • Size

      141KB

    • MD5

      a19235f98fbb6e1954ca0c6461cc51e3

    • SHA1

      6c5db7576216aebc4c0a4fd3d4a4bf9cd5a46b2a

    • SHA256

      d38b2dfbb0d25eee7ad645ad161e59db04acd24cc3afd7534b53de2d40399236

    • SHA512

      5844381f4dd95b95142df789404006ddd0f3f634bbdfc366905bc8e6b2a6374c74ec70e7d3097147b01a07cc685a16c81622ed1fd2693419530ae47c790f3803

    • SSDEEP

      3072:sGGNZfCos2pA4FC+5hvikTam0/5ApYADn:hACyK40+5hvi9m0/5ASADn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks