gafgyt | a-r[.]m-5[.]Sakura[.]elf | Triage

Sharing

General

Target

a-r.m-5.Sakura.elf
Size

98KB
MD5

c0621108140e3bcf81b137c3e99f98af
SHA1

d9bc315b4cf1b6eae4493ae5189e8d33e94eeee8
SHA256

77a2b5d42a9b837f9bc76723f325005d4d85daf8b9d989ce411402034acb9cdf
SHA512

07a33f0724ebc42bddcc260e1fc11c34a15380bae62b526a497e464d3f64a00db003341ca3aef8655972f311f00d0523591c62383a6338fd45462d18e384df2d
SSDEEP

3072:VSx+i6mqaObhNfnPNKV+qKmZuqQ4DPwXXtse:y6mRObnfnP7qKmZuqQ4DPwXXtse

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

31.172.87.139:12345

Signatures

Detected Gafgyt variant 1 IoCs

Processes:

resource yara_rule

sample family_gafgyt
Gafgyt family
gafgyt

Files

a-r.m-5.Sakura.elf
.elf linux arm