gafgyt | m-6[.]8-k[.]Sakura[.]elf | Triage

Sharing

General

Target

m-6.8-k.Sakura.elf
Size

156KB
MD5

7aa62ab75ba19e44fa6e1db786629ed0
SHA1

abf6678f1e87fcc789538a33728d468dc372cb7d
SHA256

d7d91306ff19624b291be31cb42c238cfc5383b8517760f4e5670e4afbdddd86
SHA512

a0c589bb67f5ef10ed5881fdba4806900a74651405b83d0ab4e0a592c172db0946e5bc46e50873ac63bce39d789b9a7ac3bf46937e8fbeaff5bc0df2590a1002
SSDEEP

3072:T1g2/eINNlzx2kkQCMOaQcvBpYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/7YnydM/9MmFwfBxE

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

31.172.87.139:12345

Signatures

Detected Gafgyt variant 1 IoCs

Processes:

resource yara_rule

sample family_gafgyt
Gafgyt family
gafgyt

Files

m-6.8-k.Sakura.elf
.elf linux arm