General

  • Target

    hidakibest.arm5.elf

  • Size

    150KB

  • Sample

    241122-26tgks1rct

  • MD5

    2019d6f3ca9696122b2a46bde0c22e9a

  • SHA1

    8e95db4f407919b1bed25258b2ab7af56e2a0c52

  • SHA256

    983e19517ae90c2905a1c5071e1afa031d6cfce9d2377ceb74c45dc2e086625b

  • SHA512

    10d7899176eeb63acba225484db1b2102c80e3ac8dabd6314476f583984c0258d3624a9d885af5d42bda0f7ddada102217a0a464d4a86ba72bb6d8d77b7a7d7b

  • SSDEEP

    3072:/dQbnQao0HawD+zQNz7gb5hZ1GU2WV7kxHmpwTsL/QMyn:VmQao0H3D9z7+5hZ1GU2WV7kNmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.212.148.212:4258

Targets

    • Target

      hidakibest.arm5.elf

    • Size

      150KB

    • MD5

      2019d6f3ca9696122b2a46bde0c22e9a

    • SHA1

      8e95db4f407919b1bed25258b2ab7af56e2a0c52

    • SHA256

      983e19517ae90c2905a1c5071e1afa031d6cfce9d2377ceb74c45dc2e086625b

    • SHA512

      10d7899176eeb63acba225484db1b2102c80e3ac8dabd6314476f583984c0258d3624a9d885af5d42bda0f7ddada102217a0a464d4a86ba72bb6d8d77b7a7d7b

    • SSDEEP

      3072:/dQbnQao0HawD+zQNz7gb5hZ1GU2WV7kxHmpwTsL/QMyn:VmQao0H3D9z7+5hZ1GU2WV7kNmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks