General

  • Target

    hidakibest.arm6.elf

  • Size

    150KB

  • Sample

    250220-wnqebasjfj

  • MD5

    91611d3c52443be597a849eec33f13de

  • SHA1

    539ac5fc32376b47a3758453e1180d051d765471

  • SHA256

    c9c6db1058b3d086d78188b000b0cf78513a5f1d7fa72eadaa7bce26db0c5826

  • SHA512

    0346bfba625009233b61853317a544886fe82a1ed47104f44e0b8a7b066be836ae4276bd12a87a4a63898b5a4f8cd34e49f44201100d4712c33dd9d1b0a96c46

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAc5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDT95hWTGZWYxVldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

64.188.99.14:4258

Targets

    • Target

      hidakibest.arm6.elf

    • Size

      150KB

    • MD5

      91611d3c52443be597a849eec33f13de

    • SHA1

      539ac5fc32376b47a3758453e1180d051d765471

    • SHA256

      c9c6db1058b3d086d78188b000b0cf78513a5f1d7fa72eadaa7bce26db0c5826

    • SHA512

      0346bfba625009233b61853317a544886fe82a1ed47104f44e0b8a7b066be836ae4276bd12a87a4a63898b5a4f8cd34e49f44201100d4712c33dd9d1b0a96c46

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAc5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDT95hWTGZWYxVldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks