General

  • Target

    hidakibest.arm5.elf

  • Size

    150KB

  • Sample

    241128-11mamssmgy

  • MD5

    fe84568cc26b482abaea48e5ff1c260f

  • SHA1

    54516d0d871405113fa7d1f5e652fdda493e5657

  • SHA256

    94b7a1510dc186e3bd1973c973c77bbafda47ea646fc91d841e6caedb64543c4

  • SHA512

    7031ab1b506d9a3d703efca367785eaa5bd85f62b838145fa87734200a571b1649c509418d9a34b34653f61eadd8f3777ecc8c75acb8592ca73cedfeb9247ace

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAw5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTx5hWTGU2WV7ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.177.25.101:4258

Targets

    • Target

      hidakibest.arm5.elf

    • Size

      150KB

    • MD5

      fe84568cc26b482abaea48e5ff1c260f

    • SHA1

      54516d0d871405113fa7d1f5e652fdda493e5657

    • SHA256

      94b7a1510dc186e3bd1973c973c77bbafda47ea646fc91d841e6caedb64543c4

    • SHA512

      7031ab1b506d9a3d703efca367785eaa5bd85f62b838145fa87734200a571b1649c509418d9a34b34653f61eadd8f3777ecc8c75acb8592ca73cedfeb9247ace

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAw5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTx5hWTGU2WV7ldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks