Overview

overview

10

Static

static

10

hidakibest.mips.elf

debian-9-mips

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    hidakibest.mips.elf

  • Size

    141KB

  • Sample

    241222-sbk3aaskcp

  • MD5

    a2f2e318660621d3770d1f55789199d5

  • SHA1

    46c7c72f1eb438259c5c0d2c74a9ecbd4070578e

  • SHA256

    412dfa6621f9156ace7e40661d5a8d2c60451592f297037730ae00b359923537

  • SHA512

    e322837fdb04deb162adb2bf91f99c49e61b08081f7616974a55920db75bd1e08b175ecfee96d0f9dc26d75dce20ccde6b33c14fe0823dd1d16edc1c5d441e7b

  • SSDEEP

    3072:sGGNZfCos2pA4FCV5hvikTam0/5ApYADn:hACyK40V5hvi9m0/5ASADn

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

185.216.71.152:4258

Targets

    • Target

      hidakibest.mips.elf

    • Size

      141KB

    • MD5

      a2f2e318660621d3770d1f55789199d5

    • SHA1

      46c7c72f1eb438259c5c0d2c74a9ecbd4070578e

    • SHA256

      412dfa6621f9156ace7e40661d5a8d2c60451592f297037730ae00b359923537

    • SHA512

      e322837fdb04deb162adb2bf91f99c49e61b08081f7616974a55920db75bd1e08b175ecfee96d0f9dc26d75dce20ccde6b33c14fe0823dd1d16edc1c5d441e7b

    • SSDEEP

      3072:sGGNZfCos2pA4FCV5hvikTam0/5ApYADn:hACyK40V5hvi9m0/5ASADn

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks