General

  • Target

    a-r.m-6.Sakura.elf

  • Size

    118KB

  • Sample

    250114-qmv1hs1mcq

  • MD5

    f90035e8afffef9f11c212d5493d9d5e

  • SHA1

    36aa6a709ec4af8724f56e17b2037c4efb4ba6dd

  • SHA256

    b1de4382d95c8b2e9b057d40761e7a2694ed5e2c955a77235688095196eb55c1

  • SHA512

    fd7121d6ee2930b761d542e7df76a792c182e7fbdd782d8e28164623813c97fdae9d68b2cb5ebebaf70cee3562ecff68767823a92fb7fb1d8d9ddb519e2d8f60

  • SSDEEP

    3072:ekYPUfsgnsb0J2ag/VftkDN0dn+mTQOY5NX3cn:9YPUfsgEo2a0tkDy+mTQOY5R3cn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

23.95.72.10:12345

Targets

    • Target

      a-r.m-6.Sakura.elf

    • Size

      118KB

    • MD5

      f90035e8afffef9f11c212d5493d9d5e

    • SHA1

      36aa6a709ec4af8724f56e17b2037c4efb4ba6dd

    • SHA256

      b1de4382d95c8b2e9b057d40761e7a2694ed5e2c955a77235688095196eb55c1

    • SHA512

      fd7121d6ee2930b761d542e7df76a792c182e7fbdd782d8e28164623813c97fdae9d68b2cb5ebebaf70cee3562ecff68767823a92fb7fb1d8d9ddb519e2d8f60

    • SSDEEP

      3072:ekYPUfsgnsb0J2ag/VftkDN0dn+mTQOY5NX3cn:9YPUfsgEo2a0tkDy+mTQOY5R3cn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks