Overview

overview

10

Static

static

10

x-8.6-.Sakura.elf

ubuntu-18.04-amd64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    x-8.6-.Sakura.elf

  • Size

    92KB

  • Sample

    221130-2kefjabe94

  • MD5

    a76c0950016b867e77789b73c9aaf381

  • SHA1

    9b9b3d2e4d910ad45b353ba21a767d7a3553bbb4

  • SHA256

    1f08ad82beb057ed447fc8fdabb75c738f671edb3eef942b22ec330623228062

  • SHA512

    75022e215ccc917c57b7fc796b7145ed2a84237089685d85fa2248b9facd828094284759909cc58e26142897310e3844e3890b463f5a99e5a96cdd18834f9f37

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3fyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKPifUm/KWOXFE

Score
10/10
gafgytlinux

Malware Config

Targets

    • Target

      x-8.6-.Sakura.elf

    • Size

      92KB

    • MD5

      a76c0950016b867e77789b73c9aaf381

    • SHA1

      9b9b3d2e4d910ad45b353ba21a767d7a3553bbb4

    • SHA256

      1f08ad82beb057ed447fc8fdabb75c738f671edb3eef942b22ec330623228062

    • SHA512

      75022e215ccc917c57b7fc796b7145ed2a84237089685d85fa2248b9facd828094284759909cc58e26142897310e3844e3890b463f5a99e5a96cdd18834f9f37

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3fyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKPifUm/KWOXFE

    Score
    8/10

    • Modifies hosts file

      Adds to hosts file used for mapping hosts to IP addresses.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks