gafgyt | 2c5496363122f23dc8470a48c068dd76ba2a99e1ae4cdf62ff24de5964ee1da1 | Triage

Sharing

General

Target

2c5496363122f23dc8470a48c068dd76ba2a99e1ae4cdf62ff24de5964ee1da1
Size

123KB
Sample

221130-q6sphafc23
MD5

2c94e717547936fff609cb9869172388
SHA1

cd0acd82a4d1581232c190506af28aed7ec632fa
SHA256

2c5496363122f23dc8470a48c068dd76ba2a99e1ae4cdf62ff24de5964ee1da1
SHA512

399ad8d14d26556b3f5c9338093406f72a4344a8da2e3d01c4747fca162205a7a28b1ed30840c534fb16e6426b881826f41c18b7f214aec18a20e0f27998446f
SSDEEP

1536:o7jx1TFaq+rgIyo2rKfRS/1vt5O7eASyLuy5hJdddddBRzCXdwmeFfkq+QCyRnV6:EbCavt5Ohay5hhRzCNwmeRkq+QXnVgj

Score

10^/10

gafgyt

Malware Config

Targets

- Target
  
  2c5496363122f23dc8470a48c068dd76ba2a99e1ae4cdf62ff24de5964ee1da1
- Size
  
  123KB
- MD5
  
  2c94e717547936fff609cb9869172388
- SHA1
  
  cd0acd82a4d1581232c190506af28aed7ec632fa
- SHA256
  
  2c5496363122f23dc8470a48c068dd76ba2a99e1ae4cdf62ff24de5964ee1da1
- SHA512
  
  399ad8d14d26556b3f5c9338093406f72a4344a8da2e3d01c4747fca162205a7a28b1ed30840c534fb16e6426b881826f41c18b7f214aec18a20e0f27998446f
- SSDEEP
  
  1536:o7jx1TFaq+rgIyo2rKfRS/1vt5O7eASyLuy5hJdddddBRzCXdwmeFfkq+QCyRnV6:EbCavt5Ohay5hhRzCNwmeRkq+QXnVgj
Score

7^/10
- Reads system routing table
  Gets active network interfaces from /proc virtual filesystem.
- Reads system network configuration
  Uses contents of /proc filesystem to enumerate network settings.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1