General

  • Target

    hidakibest.arm4.elf

  • Size

    112KB

  • Sample

    241204-3h9pbsspaj

  • MD5

    d62bba1403b60d0ec2d89aee811fde3b

  • SHA1

    b7e527f02980b84eb2fa430d7b86e56a2a45c46d

  • SHA256

    e674c1ea983d2c7038522a14b81ff1b733ef5a6603993d114306bf7b901f091b

  • SHA512

    5eac98008101332b3b147606ee74dc027c6d44d288f76c36030ddcd275838515cecdd3e06eb62dcc1d64153f5621d062a7dd8e656958695b6f306c9975af5328

  • SSDEEP

    3072:vhfviOui5FCRSUaVejY68tS5hqSr3hGm0Qxu1bXWIn:pvfUQVejYXtS5hqSr3hGm0Qxu1rWIn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

172.234.21.34:4258

Targets

    • Target

      hidakibest.arm4.elf

    • Size

      112KB

    • MD5

      d62bba1403b60d0ec2d89aee811fde3b

    • SHA1

      b7e527f02980b84eb2fa430d7b86e56a2a45c46d

    • SHA256

      e674c1ea983d2c7038522a14b81ff1b733ef5a6603993d114306bf7b901f091b

    • SHA512

      5eac98008101332b3b147606ee74dc027c6d44d288f76c36030ddcd275838515cecdd3e06eb62dcc1d64153f5621d062a7dd8e656958695b6f306c9975af5328

    • SSDEEP

      3072:vhfviOui5FCRSUaVejY68tS5hqSr3hGm0Qxu1bXWIn:pvfUQVejYXtS5hqSr3hGm0Qxu1rWIn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks