Overview

overview

10

Static

static

10

a-r.m-6.Sakura.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a-r.m-6.Sakura.elf

  • Size

    118KB

  • Sample

    230226-mxtnnage3s

  • MD5

    5b1bbf38bd3ade35a2557875319c0e7c

  • SHA1

    4a0943bff8f9fdd2ee5890119a20e5917e8f8cb4

  • SHA256

    dd104e248ac21e06d6a5403419ae9862a48c8b1cea20ecab6efb8f4e5198601a

  • SHA512

    af9aac83978f43bce8f5c935ac1a251e22c815910ac031797e4ef194bfd7e62189bc8e1e0bab715abde8ea8d324feb04f865da5cc590dcaef349cbb9f5bf98ff

  • SSDEEP

    3072:ekYPUfsgnsb0J2ag/VfakDN0dn+mTQOY5NX3cn:9YPUfsgEo2a0akDy+mTQOY5R3cn

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      a-r.m-6.Sakura.elf

    • Size

      118KB

    • MD5

      5b1bbf38bd3ade35a2557875319c0e7c

    • SHA1

      4a0943bff8f9fdd2ee5890119a20e5917e8f8cb4

    • SHA256

      dd104e248ac21e06d6a5403419ae9862a48c8b1cea20ecab6efb8f4e5198601a

    • SHA512

      af9aac83978f43bce8f5c935ac1a251e22c815910ac031797e4ef194bfd7e62189bc8e1e0bab715abde8ea8d324feb04f865da5cc590dcaef349cbb9f5bf98ff

    • SSDEEP

      3072:ekYPUfsgnsb0J2ag/VfakDN0dn+mTQOY5NX3cn:9YPUfsgEo2a0akDy+mTQOY5R3cn

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks