Overview

overview

10

Static

static

10

m-i.p-s.Sakura.elf

debian-9-mips

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    m-i.p-s.Sakura.elf

  • Size

    123KB

  • Sample

    241210-v4xmwswpcm

  • MD5

    bb80b6c414e11d03d63ffdbf7b47aa76

  • SHA1

    e688615f95d5809c4588e19ade9eb0bd43bbad93

  • SHA256

    d2eb9394cb5b769124b55695df67009d2ceea9367aa9b8d69ec7bd921d8e151f

  • SHA512

    5d09788e662b8841b90c3c33bdd9ef70cb759e8b9bd8e1e9a86fa7b39327ccb7c558502d914016a46e1566c74e3c224e51965a83d79746fbf13a86b51ab6a069

  • SSDEEP

    1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBe9EdWfRZrmW+IFj:Ted0W0MZQHBd6RZrmW+IFB1Dt1hR/

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.251:12345

Targets

    • Target

      m-i.p-s.Sakura.elf

    • Size

      123KB

    • MD5

      bb80b6c414e11d03d63ffdbf7b47aa76

    • SHA1

      e688615f95d5809c4588e19ade9eb0bd43bbad93

    • SHA256

      d2eb9394cb5b769124b55695df67009d2ceea9367aa9b8d69ec7bd921d8e151f

    • SHA512

      5d09788e662b8841b90c3c33bdd9ef70cb759e8b9bd8e1e9a86fa7b39327ccb7c558502d914016a46e1566c74e3c224e51965a83d79746fbf13a86b51ab6a069

    • SSDEEP

      1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBe9EdWfRZrmW+IFj:Ted0W0MZQHBd6RZrmW+IFB1Dt1hR/

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks