Behavioral task
behavioral1
Sample
a-r.m-6.Sakura.elf
Resource
debian9-armhf-20240418-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
a-r.m-6.Sakura.elf
-
Size
118KB
-
MD5
47dd4c1f1108ecf8788b88f0d776f4aa
-
SHA1
ea0e1671729c5e400ec485cc0fd2243b575c8b89
-
SHA256
23a47f20a21a76b45757b8446325cdba24d7f4200ec9a6de786de95eea503000
-
SHA512
c7d2f7cb20759a1510b6bfd64d16d2c353218ae6e7f03e910b8c24870acdefd91ba687e0616ed090f1c5f77a7ead093e965869ddc2fcd096664c75919f1f97bf
-
SSDEEP
3072:ekYPUfsgnsb0J2ag/Vf2kDN0dn+mTQOY5NX3cn:9YPUfsgEo2a02kDy+mTQOY5R3cn
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
31.172.87.139:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
a-r.m-6.Sakura.elf.elf linux arm