gafgyt | 5f4016e86fc9b3809992eed609181c9bff85d17a8e96160ecdc2868bb8b26fdf | Triage

Sharing

General

Target

070ab074db2c31eb124376d23eb6c999.elf
Size

106KB
Sample

221201-ahsrlacb6z
MD5

070ab074db2c31eb124376d23eb6c999
SHA1

c195052587a79d11d12c5564811278bf87ef94ea
SHA256

5f4016e86fc9b3809992eed609181c9bff85d17a8e96160ecdc2868bb8b26fdf
SHA512

704ffdcea2c861e2626efca049156f738c7e60951abb4e4d933698bb6f0a9ba09cb0ed3f19ea60db6905be5def36b59c8d87cc49e9d06bbd76e92b0dc0863156
SSDEEP

1536:27j+1Tohq+XZ6NDmGf/Yo7exVXMXMNeUdPIUmkiIF8iCKrmne:hK4f/YrcXMrPIUmkiIF8iPrmne

Score

10^/10

gafgyt

Malware Config

Targets

- Target
  
  070ab074db2c31eb124376d23eb6c999.elf
- Size
  
  106KB
- MD5
  
  070ab074db2c31eb124376d23eb6c999
- SHA1
  
  c195052587a79d11d12c5564811278bf87ef94ea
- SHA256
  
  5f4016e86fc9b3809992eed609181c9bff85d17a8e96160ecdc2868bb8b26fdf
- SHA512
  
  704ffdcea2c861e2626efca049156f738c7e60951abb4e4d933698bb6f0a9ba09cb0ed3f19ea60db6905be5def36b59c8d87cc49e9d06bbd76e92b0dc0863156
- SSDEEP
  
  1536:27j+1Tohq+XZ6NDmGf/Yo7exVXMXMNeUdPIUmkiIF8iCKrmne:hK4f/YrcXMrPIUmkiIF8iPrmne
Score

7^/10
- Reads system routing table
  Gets active network interfaces from /proc virtual filesystem.
- Reads system network configuration
  Uses contents of /proc filesystem to enumerate network settings.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1