Overview

overview

10

Static

static

10

m-p.s-l.Sakura.elf

debian-12-mipsel

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    m-p.s-l.Sakura.elf

  • Size

    123KB

  • Sample

    241216-ldp1patrfy

  • MD5

    d1df9d4483a5f0c3cb2cbbaf60b2a0f1

  • SHA1

    1d354de6e5d383d5798d971ee2315a38bb752a57

  • SHA256

    55bcc752bd09e68d53b6ae333c590fe5a4b1ef71752ff26b54989f2a061250d4

  • SHA512

    72997ee65d9338d11b2f3d14610d1875539a117c370d8321290cd8a5b448c5eeba1de00694a591d2574df26e610e3415267198bc27d2fe5375f53985e3768a0a

  • SSDEEP

    1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Epu+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8EY+Dw8rmW+IFB1Dt1hR/

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.8:12345

Targets

    • Target

      m-p.s-l.Sakura.elf

    • Size

      123KB

    • MD5

      d1df9d4483a5f0c3cb2cbbaf60b2a0f1

    • SHA1

      1d354de6e5d383d5798d971ee2315a38bb752a57

    • SHA256

      55bcc752bd09e68d53b6ae333c590fe5a4b1ef71752ff26b54989f2a061250d4

    • SHA512

      72997ee65d9338d11b2f3d14610d1875539a117c370d8321290cd8a5b448c5eeba1de00694a591d2574df26e610e3415267198bc27d2fe5375f53985e3768a0a

    • SSDEEP

      1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Epu+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8EY+Dw8rmW+IFB1Dt1hR/

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks