General

  • Target

    hidakibest.arm4.elf

  • Size

    112KB

  • Sample

    241122-26tgksxpdn

  • MD5

    40b93365938ab7f928181cd7cd4a1bc0

  • SHA1

    78ff805bcbb48ce089f80cc47f9cc9dc81f94c47

  • SHA256

    38548bab729836106e23badebd80615fa95f17dcd461f15b47400e2fbe91c952

  • SHA512

    81ff07efb002d97bed286fa63859a423bd0f8063a64a89f6abcf0c52b19bdd9f96888fa935a987e5e7d22bcd3c1755df3b0fa049888a5e8eac14b86625501a55

  • SSDEEP

    3072:ULveOu+5FClWUaVeDYeQ1e5hiBrn1Gm0Qxu1bXWIn:6v78EVeDYH1e5hiBrn1Gm0Qxu1rWIn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.212.148.212:4258

Targets

    • Target

      hidakibest.arm4.elf

    • Size

      112KB

    • MD5

      40b93365938ab7f928181cd7cd4a1bc0

    • SHA1

      78ff805bcbb48ce089f80cc47f9cc9dc81f94c47

    • SHA256

      38548bab729836106e23badebd80615fa95f17dcd461f15b47400e2fbe91c952

    • SHA512

      81ff07efb002d97bed286fa63859a423bd0f8063a64a89f6abcf0c52b19bdd9f96888fa935a987e5e7d22bcd3c1755df3b0fa049888a5e8eac14b86625501a55

    • SSDEEP

      3072:ULveOu+5FClWUaVeDYeQ1e5hiBrn1Gm0Qxu1bXWIn:6v78EVeDYH1e5hiBrn1Gm0Qxu1rWIn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks