General

  • Target

    a-r.m-4.Sakura.elf

  • Size

    105KB

  • Sample

    241210-vxkdzs1mby

  • MD5

    31f1e73d6d69bd7048efc723ba68dc43

  • SHA1

    27ea7191b90d04baaf87af1b0ec2dda464702fac

  • SHA256

    ea4b669059899755ae9661c63f39505f62cf6e31509126bfa897fc24d35cd347

  • SHA512

    eae2def2f13ba9684e8be10751a9d23b02ab8389981832807143e045cf81740a8e38c3b53ead1efd7fcafab7b194c605915b2ffa1d9ec766681286e9ead905f3

  • SSDEEP

    3072:MSY+46m1qOzssLFPPKNy+AmkZrQAhPDCXFke:06mgOzJLFPzmkZrQAhPDCXFke

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.251:12345

Targets

    • Target

      a-r.m-4.Sakura.elf

    • Size

      105KB

    • MD5

      31f1e73d6d69bd7048efc723ba68dc43

    • SHA1

      27ea7191b90d04baaf87af1b0ec2dda464702fac

    • SHA256

      ea4b669059899755ae9661c63f39505f62cf6e31509126bfa897fc24d35cd347

    • SHA512

      eae2def2f13ba9684e8be10751a9d23b02ab8389981832807143e045cf81740a8e38c3b53ead1efd7fcafab7b194c605915b2ffa1d9ec766681286e9ead905f3

    • SSDEEP

      3072:MSY+46m1qOzssLFPPKNy+AmkZrQAhPDCXFke:06mgOzJLFPzmkZrQAhPDCXFke

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks