Overview

overview

10

Static

static

10

62bf0d72ed...c3dac7

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    62bf0d72ed7df3c803df43cbb8d2922b6dda038e27599221aaeef1f0d5c3dac7

  • Size

    150KB

  • Sample

    221130-pyf53abd43

  • MD5

    3288afc7e44e959d3b96a6a0f7418024

  • SHA1

    2d4180986ccc0bef7e84891a1ce670af04a3ee72

  • SHA256

    62bf0d72ed7df3c803df43cbb8d2922b6dda038e27599221aaeef1f0d5c3dac7

  • SHA512

    5630571b50fa56c73ac066698155481e0e52e573061e786e95c4acae5acf17196920753e7b4868d4ecd93f8ec23f0b864cd809ae3c792c7c33e0eab9fc33437d

  • SSDEEP

    3072:OIFank65nvQEaNGaQ5ObmanbHrFM/95CmpwfvRQfZn:JFak65nIEiQ5CmanD5M/95CmpwfvafZn

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      62bf0d72ed7df3c803df43cbb8d2922b6dda038e27599221aaeef1f0d5c3dac7

    • Size

      150KB

    • MD5

      3288afc7e44e959d3b96a6a0f7418024

    • SHA1

      2d4180986ccc0bef7e84891a1ce670af04a3ee72

    • SHA256

      62bf0d72ed7df3c803df43cbb8d2922b6dda038e27599221aaeef1f0d5c3dac7

    • SHA512

      5630571b50fa56c73ac066698155481e0e52e573061e786e95c4acae5acf17196920753e7b4868d4ecd93f8ec23f0b864cd809ae3c792c7c33e0eab9fc33437d

    • SSDEEP

      3072:OIFank65nvQEaNGaQ5ObmanbHrFM/95CmpwfvRQfZn:JFak65nIEiQ5CmanD5M/95CmpwfvafZn

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks