Overview

overview

10

Static

static

10

x-3.2-.Sakura.elf

ubuntu-24.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    x-3.2-.Sakura.elf

  • Size

    83KB

  • Sample

    241115-cjzyeaxalm

  • MD5

    eeb3018299df9e1fab3362f0db62d62e

  • SHA1

    d51eb0fba8597c84599086d3d56022370a7c0daf

  • SHA256

    0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269

  • SHA512

    4a50787da036aa8e0506dc08bc25701e4094f2ead5fb40dd56378183eb2c04a15977688811977953164131aca6aba4db7fc074eb65bd9c5e2830b76132e028b7

  • SSDEEP

    1536:W35b9Vc4N3J6lreu5r4hWj8L4WDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0Y82oRmEwVOz+ucfW7k

Score
10/10
gafgytlinuxrootkit

Malware Config

Extracted

Family

gafgyt

C2

31.172.87.139:12345

Targets

    • Target

      x-3.2-.Sakura.elf

    • Size

      83KB

    • MD5

      eeb3018299df9e1fab3362f0db62d62e

    • SHA1

      d51eb0fba8597c84599086d3d56022370a7c0daf

    • SHA256

      0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269

    • SHA512

      4a50787da036aa8e0506dc08bc25701e4094f2ead5fb40dd56378183eb2c04a15977688811977953164131aca6aba4db7fc074eb65bd9c5e2830b76132e028b7

    • SSDEEP

      1536:W35b9Vc4N3J6lreu5r4hWj8L4WDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0Y82oRmEwVOz+ucfW7k

    Score
    7/10
    rootkit

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit
    behavioral1

MITRE ATT&CK Matrix

Tasks