Overview

overview

10

Static

static

10

m-i.p-s.Sakura.elf

debian-9-mips

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    m-i.p-s.Sakura.elf

  • Size

    123KB

  • Sample

    241207-lr7gwsxje1

  • MD5

    fa9295407e26aded7c4dbcf2423beeb2

  • SHA1

    17ca7ee89d3574fb2d0c03ac96a6d843f6ff06f8

  • SHA256

    c38c0746ea7ced97718d7805a8735a63c6509751e0197206990f77ac37ed8013

  • SHA512

    b07d93d1322a1a34de1b41133782e9454300c203a0981d76ca9d9f837466943945dcee34f8e22f55071b1b62bf9929b79f473fc3b71986ec46a0e316b2144bc8

  • SSDEEP

    1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBeMEdWfRZrmW+IFj:Ted0W0MZQHed6RZrmW+IFB1Dt1hR/

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.191:12345

Targets

    • Target

      m-i.p-s.Sakura.elf

    • Size

      123KB

    • MD5

      fa9295407e26aded7c4dbcf2423beeb2

    • SHA1

      17ca7ee89d3574fb2d0c03ac96a6d843f6ff06f8

    • SHA256

      c38c0746ea7ced97718d7805a8735a63c6509751e0197206990f77ac37ed8013

    • SHA512

      b07d93d1322a1a34de1b41133782e9454300c203a0981d76ca9d9f837466943945dcee34f8e22f55071b1b62bf9929b79f473fc3b71986ec46a0e316b2144bc8

    • SSDEEP

      1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBeMEdWfRZrmW+IFj:Ted0W0MZQHed6RZrmW+IFB1Dt1hR/

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks