gafgyt | 382283281c3c43e1b83e2d99bb4641f83993bb952dc88b924b590624cb38d695 | Triage

Sharing

General

Target

382283281c3c43e1b83e2d99bb4641f83993bb952dc88b924b590624cb38d695
Size

101KB
Sample

221125-lz9bfscg7z
MD5

e6464baa171ac64cd5ab0a0e587bef8c
SHA1

cbdf4f1a4df8f98f4370b434df29de20280545b5
SHA256

382283281c3c43e1b83e2d99bb4641f83993bb952dc88b924b590624cb38d695
SHA512

826576ecc94ef47ec919b68c69eb6bafceef1e1785ac41ed50d6b669a441eb9ebab140f622c583d93c981f2e6c9a6938e126c2aee389f3610233272b47ad4c20
SSDEEP

3072:SOGAEtZoGZKWl6u4YTnbHtbimmFVcqq0G27ZT:SqEtZ755nbHtbimmFVcqq0G27ZT

Score

10^/10

gafgyt linux

Malware Config

Targets

- Target
  
  382283281c3c43e1b83e2d99bb4641f83993bb952dc88b924b590624cb38d695
- Size
  
  101KB
- MD5
  
  e6464baa171ac64cd5ab0a0e587bef8c
- SHA1
  
  cbdf4f1a4df8f98f4370b434df29de20280545b5
- SHA256
  
  382283281c3c43e1b83e2d99bb4641f83993bb952dc88b924b590624cb38d695
- SHA512
  
  826576ecc94ef47ec919b68c69eb6bafceef1e1785ac41ed50d6b669a441eb9ebab140f622c583d93c981f2e6c9a6938e126c2aee389f3610233272b47ad4c20
- SSDEEP
  
  3072:SOGAEtZoGZKWl6u4YTnbHtbimmFVcqq0G27ZT:SqEtZ755nbHtbimmFVcqq0G27ZT
Score

8^/10
- Modifies hosts file
  Adds to hosts file used for mapping hosts to IP addresses.
- Writes DNS configuration
  Writes data to DNS resolver config file.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Dynamic Resolution

Impact

Tasks

static1

behavioral1