gafgyt | b95dbe3c95c158dccc3774a3ced6923160e05dc205bdca281aa9bb5fa0aba441 | Triage

Sharing

General

Target

b95dbe3c95c158dccc3774a3ced6923160e05dc205bdca281aa9bb5fa0aba441
Size

149KB
Sample

221130-pvykyabb56
MD5

af3e76f9fcda00fc3287ac08e53ca52e
SHA1

b0dc33840f959fb39f3abdca69142e40ca094a34
SHA256

b95dbe3c95c158dccc3774a3ced6923160e05dc205bdca281aa9bb5fa0aba441
SHA512

adf53216f0a7613a451d959cf944b45496c837ff859bb36cda3db69cb1c185b9de0e597ba3ede0b5983be2fe09b4db7ecc9ef1e87a98a74ab5fab1f647cdb12a
SSDEEP

3072:LrbFJCact1nLNCn4IP9S6Dfnc///M/9nOmpwfvRQfZn:LrbXCact1npCB9SGfn4nM/9nOmpwfvaF

Score

10^/10

gafgyt

Malware Config

Targets

- Target
  
  b95dbe3c95c158dccc3774a3ced6923160e05dc205bdca281aa9bb5fa0aba441
- Size
  
  149KB
- MD5
  
  af3e76f9fcda00fc3287ac08e53ca52e
- SHA1
  
  b0dc33840f959fb39f3abdca69142e40ca094a34
- SHA256
  
  b95dbe3c95c158dccc3774a3ced6923160e05dc205bdca281aa9bb5fa0aba441
- SHA512
  
  adf53216f0a7613a451d959cf944b45496c837ff859bb36cda3db69cb1c185b9de0e597ba3ede0b5983be2fe09b4db7ecc9ef1e87a98a74ab5fab1f647cdb12a
- SSDEEP
  
  3072:LrbFJCact1nLNCn4IP9S6Dfnc///M/9nOmpwfvRQfZn:LrbXCact1npCB9SGfn4nM/9nOmpwfvaF
Score

7^/10
- Reads system routing table
  Gets active network interfaces from /proc virtual filesystem.
- Reads system network configuration
  Uses contents of /proc filesystem to enumerate network settings.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1