General

  • Target

    hidakibest.arm6.elf

  • Size

    113KB

  • Sample

    241222-sdk53a1qd1

  • MD5

    86e0ecb88b3a5880862e0be8e3ab0fc1

  • SHA1

    a1fae4ceab4241c5d7bd3c20c32a98d143ffdc24

  • SHA256

    223081fec38b805a88edf16c10d9dbc961af19af51edf96ae7fe4af15ff23671

  • SHA512

    83747bf98fe12efc20839f419b35ba3c1f5c31d74597708cc8db313101e0d852b3222a538326c9872fc8f9d276a6a03e606c452876bdda30f91b17e214b3a9c5

  • SSDEEP

    3072:udGs8aNAHiNPHS7fSiq5hulKM7y1myjQUJ1UXpTn:2Gs8aNEiPiq5hulKN1myjQUJ1apTn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

31.172.83.147:4258

Targets

    • Target

      hidakibest.arm6.elf

    • Size

      113KB

    • MD5

      86e0ecb88b3a5880862e0be8e3ab0fc1

    • SHA1

      a1fae4ceab4241c5d7bd3c20c32a98d143ffdc24

    • SHA256

      223081fec38b805a88edf16c10d9dbc961af19af51edf96ae7fe4af15ff23671

    • SHA512

      83747bf98fe12efc20839f419b35ba3c1f5c31d74597708cc8db313101e0d852b3222a538326c9872fc8f9d276a6a03e606c452876bdda30f91b17e214b3a9c5

    • SSDEEP

      3072:udGs8aNAHiNPHS7fSiq5hulKM7y1myjQUJ1UXpTn:2Gs8aNEiPiq5hulKN1myjQUJ1apTn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks