General

  • Target

    m-6.8-k.Sakura.elf

  • Size

    156KB

  • Sample

    241111-ptgk2aspcr

  • MD5

    496fc5c6e80dbcb22cff504a29ce5d82

  • SHA1

    96449aa12e29245e92ab07454d513bda986ecc84

  • SHA256

    1d7c7d8de74b1998b6297c00e70132eb7b0fe09247cae178e12bbca7a5740511

  • SHA512

    f9bb8f3085881969bea6aa01bdb28633f6d41697462816cd92b3b51d51e6221a12f7a938a8d3e09d163f6af2f486f3ab8f7a9138b04fb04bc07c155c92a5f365

  • SSDEEP

    3072:T1g2/eINNlzx2kkQCMOaQcvBpYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/fYnydM/9MmFwfBxE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

94.154.172.145:3074

Targets

    • Target

      m-6.8-k.Sakura.elf

    • Size

      156KB

    • MD5

      496fc5c6e80dbcb22cff504a29ce5d82

    • SHA1

      96449aa12e29245e92ab07454d513bda986ecc84

    • SHA256

      1d7c7d8de74b1998b6297c00e70132eb7b0fe09247cae178e12bbca7a5740511

    • SHA512

      f9bb8f3085881969bea6aa01bdb28633f6d41697462816cd92b3b51d51e6221a12f7a938a8d3e09d163f6af2f486f3ab8f7a9138b04fb04bc07c155c92a5f365

    • SSDEEP

      3072:T1g2/eINNlzx2kkQCMOaQcvBpYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/fYnydM/9MmFwfBxE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks