gafgyt | 04178bd89bd252ad882bb9d38bc2be80288b7575270675c2587cfff4afefe8c2 | Triage

Sharing

General

Target

4622a52d9fd968018ad4c7b4eecbe9c3
Size

175KB
Sample

211205-t8tw5afec3
MD5

4622a52d9fd968018ad4c7b4eecbe9c3
SHA1

652c8242c20c98ce552d229ee40099cb1dcb4fb8
SHA256

04178bd89bd252ad882bb9d38bc2be80288b7575270675c2587cfff4afefe8c2
SHA512

52822737a7e3c42d984165c6c471ca87364c2484bf92f73c49b334da2b9073ed274d089f5d1255a05df7076331200725247aba9317f2e8ed37a258f8929ac77f

Score

10^/10

gafgyt linux

Malware Config

Targets

- Target
  
  4622a52d9fd968018ad4c7b4eecbe9c3
- Size
  
  175KB
- MD5
  
  4622a52d9fd968018ad4c7b4eecbe9c3
- SHA1
  
  652c8242c20c98ce552d229ee40099cb1dcb4fb8
- SHA256
  
  04178bd89bd252ad882bb9d38bc2be80288b7575270675c2587cfff4afefe8c2
- SHA512
  
  52822737a7e3c42d984165c6c471ca87364c2484bf92f73c49b334da2b9073ed274d089f5d1255a05df7076331200725247aba9317f2e8ed37a258f8929ac77f
Score

8^/10
- Writes DNS configuration
  Writes data to DNS resolver config file.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Dynamic Resolution

Impact

Tasks

static1

behavioral1