General

  • Target

    hidakibest.x86.elf

  • Size

    106KB

  • Sample

    241127-mq39hsznfx

  • MD5

    2ef31c637ccfb2430423275a80381275

  • SHA1

    ccaaea22f519a90e006743fc50105fe9c32b9407

  • SHA256

    7d408cad1677de2ece0f837dc337fc7b716d03746f4304ed5b9da5ea41a3d62b

  • SHA512

    8871f4f3252adfdce72f381322889a7a2057e7ede878176da485ff1a1c19515985f5537d6d86e87fdb9360c1a583caed73b8688e9a3cdb680c366d846a468f00

  • SSDEEP

    3072:j6dye4BmJQkphaZw/1vc4+AzkSXmdRWaLHgb4:dkphaZchrmdRWaDgb4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

166.88.225.38:4258

Targets

    • Target

      hidakibest.x86.elf

    • Size

      106KB

    • MD5

      2ef31c637ccfb2430423275a80381275

    • SHA1

      ccaaea22f519a90e006743fc50105fe9c32b9407

    • SHA256

      7d408cad1677de2ece0f837dc337fc7b716d03746f4304ed5b9da5ea41a3d62b

    • SHA512

      8871f4f3252adfdce72f381322889a7a2057e7ede878176da485ff1a1c19515985f5537d6d86e87fdb9360c1a583caed73b8688e9a3cdb680c366d846a468f00

    • SSDEEP

      3072:j6dye4BmJQkphaZw/1vc4+AzkSXmdRWaLHgb4:dkphaZchrmdRWaDgb4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks