gafgyt | m-6[.]8-k[.]Sakura[.]elf | Triage

Sharing

General

Target

m-6.8-k.Sakura.elf
Size

157KB
MD5

d3973e25e6731b45942245fd94e5122a
SHA1

9101514baa18a37d164043c12deacf393d955bee
SHA256

14294bec7f615aefc954854c1ac6ceba550b8f5a654be3f9c05ad511f17bad0d
SHA512

44a3bc3e97013d4d8b806905d8abc916c56055484a13798b5982bd288286c8a319bab51dfd84e6dbfa1d176e0e0f90e1939aae48162c1829b79996d460718401
SSDEEP

3072:ydE2J1f6GbMHjGUAmsVXFFzGPnW4lM/9Lh9mFwfBxKQodn:AE2Df6GbYjGBmsV/SPnWyM/9PmFwfBxE

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

205.185.115.242:12345

Signatures

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

Gafgyt family
gafgyt

Files

m-6.8-k.Sakura.elf
.elf linux arm