Behavioral task
behavioral1
Sample
p-p.c-.Sakura.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
0 signatures
150 seconds
General
-
Target
p-p.c-.Sakura.elf
-
Size
105KB
-
MD5
2c9df4916cd12eea2beec2301be89906
-
SHA1
88422bd386503b5c904da0a5138f5ee017ab1451
-
SHA256
f05f110633308fa758054d3f890954ce42f26a6f0e3b03ee4a4d3dd939507649
-
SHA512
09395d2d819b9c47ef67bdd3f31304e9024fab966982f802248ae1bc5a07426963bd6495f1afae292442da93edb6af46228dfb79744e5cb801709c6c317d881f
-
SSDEEP
3072:MSY+46m1qOzssGFPPKNy+AmkZrQAhPDCXFke:06mgOzJGFPzmkZrQAhPDCXFke
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
31.172.87.139:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
p-p.c-.Sakura.elf.elf linux arm