General

  • Target

    m-p.s-l.Sakura.elf

  • Size

    123KB

  • Sample

    241111-ptjemazcmb

  • MD5

    56847c2e6ac887904709c8c4a9da87de

  • SHA1

    7d6c576ab4a539259c2756ea8bb2f88eaf568009

  • SHA256

    73192227b58f1b928cb02982440122924b76c9066e1db7ee7eedfed1dd26c260

  • SHA512

    b63dce6768d4ecae370f5e450c591630c7e5638180bcc09e95f519c4ad8f0a4ebc5b0eb5caaccc1703f63460620735b8615f0d4196ac8ffea863cf3eca91e7ae

  • SSDEEP

    1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Epr+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8EJ+Dw8rmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

94.154.172.145:3074

Targets

    • Target

      m-p.s-l.Sakura.elf

    • Size

      123KB

    • MD5

      56847c2e6ac887904709c8c4a9da87de

    • SHA1

      7d6c576ab4a539259c2756ea8bb2f88eaf568009

    • SHA256

      73192227b58f1b928cb02982440122924b76c9066e1db7ee7eedfed1dd26c260

    • SHA512

      b63dce6768d4ecae370f5e450c591630c7e5638180bcc09e95f519c4ad8f0a4ebc5b0eb5caaccc1703f63460620735b8615f0d4196ac8ffea863cf3eca91e7ae

    • SSDEEP

      1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Epr+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8EJ+Dw8rmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks