gafgyt | a-r[.]m-6[.]Sakura[.]elf | Triage

Sharing

General

Target

a-r.m-6.Sakura.elf
Size

118KB
MD5

425fab3d1076fc2e2c7a2fac555bd1a2
SHA1

cacd4c05abc4653c31e0a251e38bc144c7bb98c5
SHA256

b8879c45463335061316f6ca8d318e0405ac5d099e973ba9fa92d17a6a618cd4
SHA512

85922eb15be54a98e112a73de4a92b70bdd12703374d29383bde4913633edf4ec7cf2f88282976bc374f5b8a2bbce0ff039974159b0883d188e33ccec843c4f5
SSDEEP

3072:mAsPkskw70cR7eVBMVWJhDd03g+mTQOY5NX3cn:VsPkskwdZeVFJhD1+mTQOY5R3cn

Score

10^/10

gafgyt

Malware Config

Extracted

Family

gafgyt

C2

205.185.115.242:12345

Signatures

Detected Gafgyt variant 1 IoCs

resource	yara_rule
sample	family_gafgyt

Gafgyt family
gafgyt

Files

a-r.m-6.Sakura.elf
.elf linux arm