General

  • Target

    hidakibest.arm6.elf

  • Size

    150KB

  • Sample

    241217-hjmkzatraj

  • MD5

    69833b577668ce3330a5b8cba5a3a41b

  • SHA1

    ef64df3025f818dae7640f7e3703b9762ece44d0

  • SHA256

    8d18207d65fc07d0e453cde4ab0f8df909f3c24670fd1e0f6d3e921d7c83bc1d

  • SHA512

    dd6958096d7d012e2b302c9918dec22789b465734b725dc2b09d8eb0e991024b16c3bdb45e46f68692fe91b29322414c0325f810e64a2bff7d55ca97747d6fdf

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAL5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDTK5hWTGZWYxVldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

49.0.254.78:4258

Targets

    • Target

      hidakibest.arm6.elf

    • Size

      150KB

    • MD5

      69833b577668ce3330a5b8cba5a3a41b

    • SHA1

      ef64df3025f818dae7640f7e3703b9762ece44d0

    • SHA256

      8d18207d65fc07d0e453cde4ab0f8df909f3c24670fd1e0f6d3e921d7c83bc1d

    • SHA512

      dd6958096d7d012e2b302c9918dec22789b465734b725dc2b09d8eb0e991024b16c3bdb45e46f68692fe91b29322414c0325f810e64a2bff7d55ca97747d6fdf

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAL5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDTK5hWTGZWYxVldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks