gafgyt | 5e14aafc46071c88a5e6c1d54f28fbf412dfdfb1371cca38da7f4266025b12f1 | Triage

Sharing

General

Target

5e14aafc46071c88a5e6c1d54f28fbf412dfdfb1371cca38da7f4266025b12f1
Size

113KB
Sample

221125-l6rd8adb8w
MD5

38b219691409ee69d381175d3f873a48
SHA1

9ca02ee32eb8667a1f76c31c0e919edfab59719d
SHA256

5e14aafc46071c88a5e6c1d54f28fbf412dfdfb1371cca38da7f4266025b12f1
SHA512

9f0424e50fd53302d5c23b1128fdfed125b8e1137a07f6d26a69d5f670553083701f5db695ca3f9d164f111267201c50b9ebdc81d58b2b8f7b59afe9c3c4f435
SSDEEP

1536:Tgz/qzNLW/fMiZIX98U0I/QwErQNOA5hVwbfKdwwjF9GhCPR1Ae:Tgz/5f5g8utgs5hVwjKdwwjF9GhsR1Ae

Score

10^/10

gafgyt

Malware Config

Targets

- Target
  
  5e14aafc46071c88a5e6c1d54f28fbf412dfdfb1371cca38da7f4266025b12f1
- Size
  
  113KB
- MD5
  
  38b219691409ee69d381175d3f873a48
- SHA1
  
  9ca02ee32eb8667a1f76c31c0e919edfab59719d
- SHA256
  
  5e14aafc46071c88a5e6c1d54f28fbf412dfdfb1371cca38da7f4266025b12f1
- SHA512
  
  9f0424e50fd53302d5c23b1128fdfed125b8e1137a07f6d26a69d5f670553083701f5db695ca3f9d164f111267201c50b9ebdc81d58b2b8f7b59afe9c3c4f435
- SSDEEP
  
  1536:Tgz/qzNLW/fMiZIX98U0I/QwErQNOA5hVwbfKdwwjF9GhCPR1Ae:Tgz/5f5g8utgs5hVwjKdwwjF9GhsR1Ae
Score

7^/10
- Reads system routing table
  Gets active network interfaces from /proc virtual filesystem.
- Reads system network configuration
  Uses contents of /proc filesystem to enumerate network settings.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1