gafgyt | 4e0821c66f32229eff0672c96b81bd4bfaf2b20d2967984d1f78e2976ef9392d | Triage

Sharing

General

Target

4e0821c66f32229eff0672c96b81bd4bfaf2b20d2967984d1f78e2976ef9392d
Size

92KB
Sample

221130-q3j8yshf51
MD5

604ff44ad4d677f97ae2042d460efe5f
SHA1

0b41083b17c381f0976943258f79f9a303779c25
SHA256

4e0821c66f32229eff0672c96b81bd4bfaf2b20d2967984d1f78e2976ef9392d
SHA512

851015a4d2f00755045bcc622521510c3377278494358b2d42e414741bbf11a527f7b76a33d888a047834af98d0fbf638c1bbc333be2c74e1863d5b293639741
SSDEEP

1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3pyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjK5ifUm/KWOXFE

Score

10^/10

gafgyt linux

Malware Config

Targets

- Target
  
  4e0821c66f32229eff0672c96b81bd4bfaf2b20d2967984d1f78e2976ef9392d
- Size
  
  92KB
- MD5
  
  604ff44ad4d677f97ae2042d460efe5f
- SHA1
  
  0b41083b17c381f0976943258f79f9a303779c25
- SHA256
  
  4e0821c66f32229eff0672c96b81bd4bfaf2b20d2967984d1f78e2976ef9392d
- SHA512
  
  851015a4d2f00755045bcc622521510c3377278494358b2d42e414741bbf11a527f7b76a33d888a047834af98d0fbf638c1bbc333be2c74e1863d5b293639741
- SSDEEP
  
  1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3pyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjK5ifUm/KWOXFE
Score

7^/10
- Reads system routing table
  Gets active network interfaces from /proc virtual filesystem.
- Reads system network configuration
  Uses contents of /proc filesystem to enumerate network settings.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1