General

  • Target

    hidakibest.arm5.elf

  • Size

    150KB

  • Sample

    241215-lvntysslgp

  • MD5

    d7c2e9385b98f8ba9551bba2d76e8324

  • SHA1

    92a7d2654df5092f439d531b54e614315920899b

  • SHA256

    233577f4da477bceab4c15b1149157b118bbe21e79b1bc474e456960e0831c99

  • SHA512

    caa076ed72b53e21ec9bc72458357d6d625d369a738409719a1a744bc97ea118614cf7cd926570a797994226d5908bf5d5039dac4f93309167c19d423c04a89b

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAJ5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDT85hWTGU2WV7ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

166.88.225.34:4258

Targets

    • Target

      hidakibest.arm5.elf

    • Size

      150KB

    • MD5

      d7c2e9385b98f8ba9551bba2d76e8324

    • SHA1

      92a7d2654df5092f439d531b54e614315920899b

    • SHA256

      233577f4da477bceab4c15b1149157b118bbe21e79b1bc474e456960e0831c99

    • SHA512

      caa076ed72b53e21ec9bc72458357d6d625d369a738409719a1a744bc97ea118614cf7cd926570a797994226d5908bf5d5039dac4f93309167c19d423c04a89b

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAJ5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDT85hWTGU2WV7ldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks