General

  • Target

    x-8.6-.Sakura.elf

  • Size

    92KB

  • Sample

    241216-ldppxstrft

  • MD5

    6b250a6e8798f2c66db5e1b780fe79d4

  • SHA1

    6d3b8f4d69672233c52f22445b6ebda88b450e62

  • SHA256

    a4554c2a017157f931ce93d4150f624476b120ce8bb3a5287626d60506c6781b

  • SHA512

    f8cc4e41cbdf7d28b63dddee76ae13762585ffed6cbbba0d370daa29a7274c21bc51f8341bd2c3639308c0a3680488592383c0fc2d1a2535123b1ac91b1fadc4

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3myPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjK2ifUm/KWOXFE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.8:12345

Targets

    • Target

      x-8.6-.Sakura.elf

    • Size

      92KB

    • MD5

      6b250a6e8798f2c66db5e1b780fe79d4

    • SHA1

      6d3b8f4d69672233c52f22445b6ebda88b450e62

    • SHA256

      a4554c2a017157f931ce93d4150f624476b120ce8bb3a5287626d60506c6781b

    • SHA512

      f8cc4e41cbdf7d28b63dddee76ae13762585ffed6cbbba0d370daa29a7274c21bc51f8341bd2c3639308c0a3680488592383c0fc2d1a2535123b1ac91b1fadc4

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3myPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjK2ifUm/KWOXFE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks