Overview

overview

10

Static

static

10

i-5.8-6.sakura

ubuntu-18.04-amd64

i-5.8-6.sakura

debian-9-armhf

i-5.8-6.sakura

debian-9-mips

i-5.8-6.sakura

debian-9-mipsel

Sharing

Copy URL Twitter E-mail

General

  • Target
    i-5.8-6.Sakura
  • Size 114KB
  • Sample260922-pl8dsaz12q
  • SHA256 f407f10ce043dce0f4a8aeed21912f20f21f613ec0fe495394451097dc8ced0b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
botnetgafgyt

Malware Config

Extracted

Family

  • gafgyt

C2

  • 220.158.234.65:5555

Signatures

  • Family: Gafgyt/Bashlite

    IoT botnet with numerous variants first seen in 2014.

    botnetgafgyt
  • Detected Gafgyt variant 1 IoCs

File Explorer

  • i-5.8-6.Sakura
    .elf 114KB

i-5.8-6.Sakura

  • SHA256 f407f10ce043dce0f4a8aeed21912f20f21f613ec0fe495394451097dc8ced0b
  • MD5 SHA1 SHA512 SSDEEP TLSH
linux

  • Detected Gafgyt variant