General

  • Target

    hidakibest.arm5.elf

  • Size

    150KB

  • Sample

    241217-hlblgstrdj

  • MD5

    22d881996e440c1e4d0efb615ae41dd0

  • SHA1

    b50c5d04b425bacd93b7ed41656f19e700c45693

  • SHA256

    d394bb435740866b64aa1779398956ecd0c5f648c10aa18264e783706d08b77c

  • SHA512

    3c7e96e7cf13246708de6dc7fee8cd5bdecefe07ee10e381abf00030d0763e50cbbae588ffd29736dfaca43c39bb97b1e1e9c5687889975aada0119f47cbd707

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAL5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTK5hWTGU2WV7ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

49.0.254.78:4258

Targets

    • Target

      hidakibest.arm5.elf

    • Size

      150KB

    • MD5

      22d881996e440c1e4d0efb615ae41dd0

    • SHA1

      b50c5d04b425bacd93b7ed41656f19e700c45693

    • SHA256

      d394bb435740866b64aa1779398956ecd0c5f648c10aa18264e783706d08b77c

    • SHA512

      3c7e96e7cf13246708de6dc7fee8cd5bdecefe07ee10e381abf00030d0763e50cbbae588ffd29736dfaca43c39bb97b1e1e9c5687889975aada0119f47cbd707

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAL5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTK5hWTGU2WV7ldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks