gafgyt | d7f018217e307d35d43cde91e32c604be71a91d5982c03739f6de4b82ebdbddf | Triage

Sharing

General

Target

cc5d29e6a63cb2942fd63fb5e5db23b6.elf
Size

146KB
Sample

230318-k9lsgadh2s
MD5

cc5d29e6a63cb2942fd63fb5e5db23b6
SHA1

7990ccfb88ea5c0318b35af1d39573acfaa4f5fc
SHA256

d7f018217e307d35d43cde91e32c604be71a91d5982c03739f6de4b82ebdbddf
SHA512

fce1196f64535288938a9264212385e11f7eff0aa35b3d4384c8a70ec6b4e5a2a148edc4e07d91f78d8047942db84f0d3728e1ba3a0fde020c2f1a319604ffd6
SSDEEP

3072:fuNaNpF4uVN++dkhnxwQennF4M/9OD4bNWkE1kmpwfvRQfZn:mNaNpF4+NChnKQennCM/9ekmpwfvafZn

Score

10^/10

gafgyt

Malware Config

Targets

- Target
  
  cc5d29e6a63cb2942fd63fb5e5db23b6.elf
- Size
  
  146KB
- MD5
  
  cc5d29e6a63cb2942fd63fb5e5db23b6
- SHA1
  
  7990ccfb88ea5c0318b35af1d39573acfaa4f5fc
- SHA256
  
  d7f018217e307d35d43cde91e32c604be71a91d5982c03739f6de4b82ebdbddf
- SHA512
  
  fce1196f64535288938a9264212385e11f7eff0aa35b3d4384c8a70ec6b4e5a2a148edc4e07d91f78d8047942db84f0d3728e1ba3a0fde020c2f1a319604ffd6
- SSDEEP
  
  3072:fuNaNpF4uVN++dkhnxwQennF4M/9OD4bNWkE1kmpwfvRQfZn:mNaNpF4+NChnKQennCM/9ekmpwfvafZn
Score

7^/10
- Reads system routing table
  Gets active network interfaces from /proc virtual filesystem.
- Reads system network configuration
  Uses contents of /proc filesystem to enumerate network settings.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1