General

  • Target

    hidakibest.mpsl.elf

  • Size

    141KB

  • Sample

    241127-mq4kaaznfz

  • MD5

    929cb47f8ba8b69ff18dcbc5bebb5064

  • SHA1

    ad9202e20e47ba663986c5f42010558632d55bea

  • SHA256

    eb976bcd473ce1d54a7f35d66b1ed7540ce276b57e6eb197758c6451d7cddfe9

  • SHA512

    5313173b5bccd92a76d657560c6e5ac7179e4d40ee0715ee2cf9db52b693c1eacab0a7e638c4ffc091f19c8fbfdb6f8dae701f1120ce154e129fdfe58a66af15

  • SSDEEP

    3072:lBXpqf9VHGn7vsD5htpRvHpVFm0/5ApYADn:llp4WvsD5htvp7m0/5ASADn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

166.88.225.38:4258

Targets

    • Target

      hidakibest.mpsl.elf

    • Size

      141KB

    • MD5

      929cb47f8ba8b69ff18dcbc5bebb5064

    • SHA1

      ad9202e20e47ba663986c5f42010558632d55bea

    • SHA256

      eb976bcd473ce1d54a7f35d66b1ed7540ce276b57e6eb197758c6451d7cddfe9

    • SHA512

      5313173b5bccd92a76d657560c6e5ac7179e4d40ee0715ee2cf9db52b693c1eacab0a7e638c4ffc091f19c8fbfdb6f8dae701f1120ce154e129fdfe58a66af15

    • SSDEEP

      3072:lBXpqf9VHGn7vsD5htpRvHpVFm0/5ApYADn:llp4WvsD5htvp7m0/5ASADn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks