Overview

overview

10

Static

static

10

p-p.c-.Sakura.elf

debian-9-armhf

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    p-p.c-.Sakura.elf

  • Size

    105KB

  • Sample

    241207-lr7gwsspbn

  • MD5

    6e80a5217c6d2bd6f076ebdb32a420f0

  • SHA1

    a6051d8000358438bedddf94d83a64fe8f215ced

  • SHA256

    517e5f65c8af8123d0939b560074c9cf735829d5b141f8764b4f982bc6aa3f62

  • SHA512

    57dae19994814e98a3aa5385152fcf41390b334bea56fa8c56baf5273aa97f5153e08038dd59b3f9542fc883e730dd6a35b8a2a1b2a82ea523a85096bdd5cc04

  • SSDEEP

    3072:MSY+46m1qOzsssFPPKNy+AmkZrQAhPDCXFke:06mgOzJsFPzmkZrQAhPDCXFke

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.191:12345

Targets

    • Target

      p-p.c-.Sakura.elf

    • Size

      105KB

    • MD5

      6e80a5217c6d2bd6f076ebdb32a420f0

    • SHA1

      a6051d8000358438bedddf94d83a64fe8f215ced

    • SHA256

      517e5f65c8af8123d0939b560074c9cf735829d5b141f8764b4f982bc6aa3f62

    • SHA512

      57dae19994814e98a3aa5385152fcf41390b334bea56fa8c56baf5273aa97f5153e08038dd59b3f9542fc883e730dd6a35b8a2a1b2a82ea523a85096bdd5cc04

    • SSDEEP

      3072:MSY+46m1qOzsssFPPKNy+AmkZrQAhPDCXFke:06mgOzJsFPzmkZrQAhPDCXFke

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks