gafgyt | a-r[.]m-5[.]Sakura[.]elf | Triage

Sharing

General

Target

a-r.m-5.Sakura.elf
Size

98KB
MD5

52bc63fd650de35bc245573ae44ea364
SHA1

6e368a8a81f40675b449703bce52bee1533dd0e4
SHA256

2f530823763542f3b6fd2a9a3a32a44fdab8f266edc7dbbf1551045fdb72c867
SHA512

6caa8497bff776038ae51070f237e71ea13feeb3f82bae1a3c2314be9eb757aee96254fdb938d5892ebddb04ff15e958fef27a8ade93d5f1d08e931dc49d0a58
SSDEEP

3072:VSx+i6mqaObhNCnPNKV+qKmZuqQ4DPwXXtse:y6mRObnCnP7qKmZuqQ4DPwXXtse

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.251:12345

Signatures

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

Gafgyt family
gafgyt

Files

a-r.m-5.Sakura.elf
.elf linux arm