General

  • Target

    x-8.6-.Sakura.elf

  • Size

    92KB

  • Sample

    241115-cj1jyaxaph

  • MD5

    2b5200aa3053113849e2d0fedec29f7f

  • SHA1

    93362f37a82116f64723dd3dd5e8977f46000a76

  • SHA256

    15f0cf2d713b81a0b188e1f7291ea36615329dd172f375679ffd59c6b03cc7d3

  • SHA512

    53da061f7cdf96aab76448de64b3b9a1e55904b20d1248b664df57bfe2fa7ae080be96b70a2fa3bbf8fa37d4a0664e0e0cb3eaf9f22c39f861b875f23ade9ef1

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3vyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjK/ifUm/KWOXFE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

31.172.87.139:12345

Targets

    • Target

      x-8.6-.Sakura.elf

    • Size

      92KB

    • MD5

      2b5200aa3053113849e2d0fedec29f7f

    • SHA1

      93362f37a82116f64723dd3dd5e8977f46000a76

    • SHA256

      15f0cf2d713b81a0b188e1f7291ea36615329dd172f375679ffd59c6b03cc7d3

    • SHA512

      53da061f7cdf96aab76448de64b3b9a1e55904b20d1248b664df57bfe2fa7ae080be96b70a2fa3bbf8fa37d4a0664e0e0cb3eaf9f22c39f861b875f23ade9ef1

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3vyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjK/ifUm/KWOXFE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks