Overview

overview

10

Static

static

10

s-h.4-.sakura

ubuntu-18.04-amd64

s-h.4-.sakura

debian-9-armhf

s-h.4-.sakura

debian-9-mips

s-h.4-.sakura

debian-9-mipsel

Sharing

Copy URL Twitter E-mail

General

  • Target
    s-h.4-.Sakura
  • Size 103KB
  • Sample260628-amk8baev4l
  • SHA256 ceade2e6f3cc94173e8f6a7b065f359328dfcde8dd3931beeb26822627cd343a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
botnetgafgyt

Malware Config

Extracted

Family

  • gafgyt

C2

  • 45.192.97.47:5555

Signatures

  • Family: Gafgyt/Bashlite

    IoT botnet with numerous variants first seen in 2014.

    botnetgafgyt
  • Detected Gafgyt variant 1 IoCs

File Explorer

  • s-h.4-.Sakura
    .elf 103KB

s-h.4-.Sakura

  • SHA256 ceade2e6f3cc94173e8f6a7b065f359328dfcde8dd3931beeb26822627cd343a
  • MD5 SHA1 SHA512 SSDEEP TLSH
linuxsh

  • Detected Gafgyt variant