gafgyt | a-r[.]m-5[.]Sakura[.]elf | Triage

Sharing

General

Target

a-r.m-5.Sakura.elf
Size

156KB
MD5

99904711224e5a884067f787bdb6bf3e
SHA1

c57fe3f4ec6ec0d1b9da6780dd770a77760f69a9
SHA256

e82abe40df84dace0273374654978c3402b1ce517423bff6df227bbf8fd2f10e
SHA512

5bb058b1f5a8dc2ee44180c9dc9134d4def344b0957bc109b74662deb77720c717ec9d73437d27cc939f61d5d3c3364f2310f9caa6f95d5f3aa9cc898ae6c0b7
SSDEEP

3072:T1g2/eINNlzx2kkQCMOaQcvBdYn1wpV7q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/bYn1wpV7MmFwfBxE

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

185.224.0.148:606

Signatures

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

Gafgyt family
gafgyt

Files

a-r.m-5.Sakura.elf
.elf linux arm