gafgyt | af21076246e2f0be9f2431a8e23122a9a998168ca08a5d9f5c6ce42d6b69e507 | Triage

Sharing

General

Target

edf393c39fe8a2125dee426f77384a8e.elf
Size

110KB
Sample

230323-xfrg3sbd8y
MD5

edf393c39fe8a2125dee426f77384a8e
SHA1

4d07589209fbe76d6715c65289c8f749237b6d19
SHA256

af21076246e2f0be9f2431a8e23122a9a998168ca08a5d9f5c6ce42d6b69e507
SHA512

bda089b9d2849c6f20092fb3b116375c18d416814ba5955dfd152b58beed1274d061096d0c45673b10756d5f4137b845e703503cb97ffaae06e455ac260c5bf6
SSDEEP

1536:ZLeTikthhSMOCMQS+ZjN4pjuIxreg2ONN2eDo/TUmkiSFxfC7xbXe:ZhHC3S+dUrecNTDiTUmkiSFxfKxbXe

Score

10^/10

gafgyt

Malware Config

Targets

- Target
  
  edf393c39fe8a2125dee426f77384a8e.elf
- Size
  
  110KB
- MD5
  
  edf393c39fe8a2125dee426f77384a8e
- SHA1
  
  4d07589209fbe76d6715c65289c8f749237b6d19
- SHA256
  
  af21076246e2f0be9f2431a8e23122a9a998168ca08a5d9f5c6ce42d6b69e507
- SHA512
  
  bda089b9d2849c6f20092fb3b116375c18d416814ba5955dfd152b58beed1274d061096d0c45673b10756d5f4137b845e703503cb97ffaae06e455ac260c5bf6
- SSDEEP
  
  1536:ZLeTikthhSMOCMQS+ZjN4pjuIxreg2ONN2eDo/TUmkiSFxfC7xbXe:ZhHC3S+dUrecNTDiTUmkiSFxfKxbXe
Score

7^/10
- Reads system routing table
  Gets active network interfaces from /proc virtual filesystem.
- Reads system network configuration
  Uses contents of /proc filesystem to enumerate network settings.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1