General

  • Target

    hidakibest.mpsl.elf

  • Size

    141KB

  • Sample

    250228-x3jezsvthz

  • MD5

    41103065e984b3a26674b69e1de4e1a0

  • SHA1

    b7c0cedb5ea1a0464e42764688d4329be4138c3a

  • SHA256

    2fee54f1476ca0ef59b8db3c8d46bcce791d4956123cdc38859ec7fef371ebc8

  • SHA512

    16040000f5d9cfa6f1164fb236ed216d22238b747a93cc1be7a23e18c36d3b00ebdb25862248d1cf360b030e1dbffb3cd2d0c34106a978c9d038209d2896548e

  • SSDEEP

    3072:lBXpqf9VHGn7vs65htpRvHpVFm0/5ApYADn:llp4Wvs65htvp7m0/5ASADn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.87.246.149:4258

Targets

    • Target

      hidakibest.mpsl.elf

    • Size

      141KB

    • MD5

      41103065e984b3a26674b69e1de4e1a0

    • SHA1

      b7c0cedb5ea1a0464e42764688d4329be4138c3a

    • SHA256

      2fee54f1476ca0ef59b8db3c8d46bcce791d4956123cdc38859ec7fef371ebc8

    • SHA512

      16040000f5d9cfa6f1164fb236ed216d22238b747a93cc1be7a23e18c36d3b00ebdb25862248d1cf360b030e1dbffb3cd2d0c34106a978c9d038209d2896548e

    • SSDEEP

      3072:lBXpqf9VHGn7vs65htpRvHpVFm0/5ApYADn:llp4Wvs65htvp7m0/5ASADn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks