General

  • Target

    hidakibest.arm5.elf

  • Size

    150KB

  • Sample

    241129-l8hj4azley

  • MD5

    1b8f4843dd6df6374c23b04c7c5538be

  • SHA1

    b9f0a88db5b015bf605095f4ca0651db5fc71999

  • SHA256

    f2fd97aba6b540851480818f6623bbb6d35757437c387a2e174c7c5398ed2493

  • SHA512

    d2c67693cb35f05a6a89e9c7425dd2d037ba51139cad061ec4e5246e2a682a807b5bd3688a4b201b9d1b132521759563526d63e5b570276b5119c0feba91bf86

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAJ5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTc5hWTGU2WV7ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.131.108.84:4258

Targets

    • Target

      hidakibest.arm5.elf

    • Size

      150KB

    • MD5

      1b8f4843dd6df6374c23b04c7c5538be

    • SHA1

      b9f0a88db5b015bf605095f4ca0651db5fc71999

    • SHA256

      f2fd97aba6b540851480818f6623bbb6d35757437c387a2e174c7c5398ed2493

    • SHA512

      d2c67693cb35f05a6a89e9c7425dd2d037ba51139cad061ec4e5246e2a682a807b5bd3688a4b201b9d1b132521759563526d63e5b570276b5119c0feba91bf86

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAJ5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTc5hWTGU2WV7ldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks