gafgyt | b6d09b5681cdb910219d0b9837bbda0f131dfe6827619ac12c34193e9a6ba374 | Triage

Sharing

General

Target

fa470fef05b6569db8e3b35db6bb787c.elf
Size

123KB
Sample

230317-qcnhpaac6y
MD5

fa470fef05b6569db8e3b35db6bb787c
SHA1

784c11640302d6af4a2590b99f280be049cc2ebc
SHA256

b6d09b5681cdb910219d0b9837bbda0f131dfe6827619ac12c34193e9a6ba374
SHA512

69f01df59c62b4d345feb4a19f2c0a68dace0737d9c611523bdc7cb0ef217b9a99a6492d207aa6f5160c907fda3779e421b6b1f730b05c442857254c6f96c0f3
SSDEEP

1536:KHeTxSA2cMYWZ2IV6oQ43wc4wUYkOcdpXPlYUrmW+IFB1Df11hR/:KZ55QGwc4McdlPqUrmW+IFB1Dt1hR/

Score

10^/10

gafgyt

Malware Config

Targets

- Target
  
  fa470fef05b6569db8e3b35db6bb787c.elf
- Size
  
  123KB
- MD5
  
  fa470fef05b6569db8e3b35db6bb787c
- SHA1
  
  784c11640302d6af4a2590b99f280be049cc2ebc
- SHA256
  
  b6d09b5681cdb910219d0b9837bbda0f131dfe6827619ac12c34193e9a6ba374
- SHA512
  
  69f01df59c62b4d345feb4a19f2c0a68dace0737d9c611523bdc7cb0ef217b9a99a6492d207aa6f5160c907fda3779e421b6b1f730b05c442857254c6f96c0f3
- SSDEEP
  
  1536:KHeTxSA2cMYWZ2IV6oQ43wc4wUYkOcdpXPlYUrmW+IFB1Df11hR/:KZ55QGwc4McdlPqUrmW+IFB1Dt1hR/
Score

7^/10
- Reads system routing table
  Gets active network interfaces from /proc virtual filesystem.
- Reads system network configuration
  Uses contents of /proc filesystem to enumerate network settings.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1