gafgyt | 4432dcf3416a7bb738e2e4a0e98a6c78aad2abcd1dfdd4142643639ed401f94e | Triage

Sharing

General

Target

4432dcf3416a7bb738e2e4a0e98a6c78aad2abcd1dfdd4142643639ed401f94e
Size

146KB
Sample

221130-p1by5abe82
MD5

d38b6c951c91d120a0aeba1deb4cbd42
SHA1

7f7eb7c8e069470696a1678fee0c4626295e6227
SHA256

4432dcf3416a7bb738e2e4a0e98a6c78aad2abcd1dfdd4142643639ed401f94e
SHA512

5bbd773a8b390a323dfe6ce4f25879be251c993f7515f7c9ce0489ad33f6d660a610dbe6c679b4a1feee60e18969459205c68e2e33f0909dfb2f2bf6bef8a011
SSDEEP

3072:De63VDzi+Xl6B7pafmkX2Q7XFsM/9RfEEdCmLwfCDQSAW:S63VDG+IB7pajGQ7XuM/9RMEcmLwfCE2

Score

10^/10

gafgyt

Malware Config

Targets

- Target
  
  4432dcf3416a7bb738e2e4a0e98a6c78aad2abcd1dfdd4142643639ed401f94e
- Size
  
  146KB
- MD5
  
  d38b6c951c91d120a0aeba1deb4cbd42
- SHA1
  
  7f7eb7c8e069470696a1678fee0c4626295e6227
- SHA256
  
  4432dcf3416a7bb738e2e4a0e98a6c78aad2abcd1dfdd4142643639ed401f94e
- SHA512
  
  5bbd773a8b390a323dfe6ce4f25879be251c993f7515f7c9ce0489ad33f6d660a610dbe6c679b4a1feee60e18969459205c68e2e33f0909dfb2f2bf6bef8a011
- SSDEEP
  
  3072:De63VDzi+Xl6B7pafmkX2Q7XFsM/9RfEEdCmLwfCDQSAW:S63VDG+IB7pajGQ7XuM/9RMEcmLwfCE2
Score

7^/10
- Reads system routing table
  Gets active network interfaces from /proc virtual filesystem.
- Reads system network configuration
  Uses contents of /proc filesystem to enumerate network settings.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1