gafgyt | c8650407f54f0719d70374aa2774331379f4dad9abded332c7906cdc5435a2b6 | Triage

Sharing

General

Target

6a8557599a13b54e2d935b537eeee079.elf
Size

156KB
Sample

230317-ql9ghsad3s
MD5

6a8557599a13b54e2d935b537eeee079
SHA1

3aea423203258cff42ce13370d777cb94b0d5c19
SHA256

c8650407f54f0719d70374aa2774331379f4dad9abded332c7906cdc5435a2b6
SHA512

c2a8051cdf7347dac6ec6709fb2f5fad34ebddcbc55a8e4e1b7ffef8c77da072a7d9833d615945108f3de1ac3d249b959925794d8be8adc1e7a95cc48483ae05
SSDEEP

3072:A1g2SIDdVTj6Q4VK5iaAE/xgBnyLRM/9iRmFwfBxKQodn:Wg2FDdVTOQ4s5iaX6BnydM/9ymFwfBxE

Score

10^/10

gafgyt

Malware Config

Targets

- Target
  
  6a8557599a13b54e2d935b537eeee079.elf
- Size
  
  156KB
- MD5
  
  6a8557599a13b54e2d935b537eeee079
- SHA1
  
  3aea423203258cff42ce13370d777cb94b0d5c19
- SHA256
  
  c8650407f54f0719d70374aa2774331379f4dad9abded332c7906cdc5435a2b6
- SHA512
  
  c2a8051cdf7347dac6ec6709fb2f5fad34ebddcbc55a8e4e1b7ffef8c77da072a7d9833d615945108f3de1ac3d249b959925794d8be8adc1e7a95cc48483ae05
- SSDEEP
  
  3072:A1g2SIDdVTj6Q4VK5iaAE/xgBnyLRM/9iRmFwfBxKQodn:Wg2FDdVTOQ4s5iaX6BnydM/9ymFwfBxE
Score

7^/10
- Reads system routing table
  Gets active network interfaces from /proc virtual filesystem.
- Reads system network configuration
  Uses contents of /proc filesystem to enumerate network settings.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1