General

  • Target

    a-r.m-6.Sakura.elf

  • Size

    156KB

  • Sample

    250226-yf4yvazzcs

  • MD5

    5064fd6f7a7e90a0d7521e43b695eac9

  • SHA1

    50ec581d20adfd5fc53a0d6cd092043f741e8a3f

  • SHA256

    21285533ff114b7ec4b567d9bb7f16d566baf2f165160ba37bd96895de67960f

  • SHA512

    fc7699eeaf25d122fe6e2c28bf80404c857a757013b54c0a4ec19d0519ec134b1cee5c62a6c320e11a99220cc094feabaee5afd8a72b630efaa07d042366e3a6

  • SSDEEP

    3072:T1g2/eINNlzx2kkQCMOaQcvBdYnYQTxVq3tmFwfBxKQodn:hg2hNNlzIkk/MOa/bYnYQTxVMmFwfBxE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.224.0.148:606

Targets

    • Target

      a-r.m-6.Sakura.elf

    • Size

      156KB

    • MD5

      5064fd6f7a7e90a0d7521e43b695eac9

    • SHA1

      50ec581d20adfd5fc53a0d6cd092043f741e8a3f

    • SHA256

      21285533ff114b7ec4b567d9bb7f16d566baf2f165160ba37bd96895de67960f

    • SHA512

      fc7699eeaf25d122fe6e2c28bf80404c857a757013b54c0a4ec19d0519ec134b1cee5c62a6c320e11a99220cc094feabaee5afd8a72b630efaa07d042366e3a6

    • SSDEEP

      3072:T1g2/eINNlzx2kkQCMOaQcvBdYnYQTxVq3tmFwfBxKQodn:hg2hNNlzIkk/MOa/bYnYQTxVMmFwfBxE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks