gafgyt | a-r[.]m-6[.]Sakura[.]elf | Triage

Sharing

General

Target

a-r.m-6.Sakura.elf
Size

156KB
MD5

5064fd6f7a7e90a0d7521e43b695eac9
SHA1

50ec581d20adfd5fc53a0d6cd092043f741e8a3f
SHA256

21285533ff114b7ec4b567d9bb7f16d566baf2f165160ba37bd96895de67960f
SHA512

fc7699eeaf25d122fe6e2c28bf80404c857a757013b54c0a4ec19d0519ec134b1cee5c62a6c320e11a99220cc094feabaee5afd8a72b630efaa07d042366e3a6
SSDEEP

3072:T1g2/eINNlzx2kkQCMOaQcvBdYnYQTxVq3tmFwfBxKQodn:hg2hNNlzIkk/MOa/bYnYQTxVMmFwfBxE

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

185.224.0.148:606

Signatures

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

Gafgyt family
gafgyt

Files

a-r.m-6.Sakura.elf
.elf linux arm