gafgyt | d80631067a28fb3c90f106bf2d4ca77767f47a32fa3cb6b7214389468babecb8 | Triage

Sharing

General

Target

e24d2ab30176ded5eb3726f6737910f3.elf
Size

71KB
Sample

230328-v4bqescc44
MD5

e24d2ab30176ded5eb3726f6737910f3
SHA1

41365bbb69e12698cfece880a6b14d785b10dbc6
SHA256

d80631067a28fb3c90f106bf2d4ca77767f47a32fa3cb6b7214389468babecb8
SHA512

435a274cc91cb233e17dbb6e8059a645d65e0e46580a512980f3d15f48e472837370e88fadb0d43efd1ef566614254c95e3d29a477cf27ee5f374d83d7988345
SSDEEP

1536:LpV5eEb0IdkPZHPQ2XH3di1JBBtvPCHz7bqvBw49mZ+LVO049unnuY:9V4EldkhHPB33wLtvKTfqq49mQLVO0iK

Score

10^/10

gafgyt discovery linux

Malware Config

Targets

- Target
  
  e24d2ab30176ded5eb3726f6737910f3.elf
- Size
  
  71KB
- MD5
  
  e24d2ab30176ded5eb3726f6737910f3
- SHA1
  
  41365bbb69e12698cfece880a6b14d785b10dbc6
- SHA256
  
  d80631067a28fb3c90f106bf2d4ca77767f47a32fa3cb6b7214389468babecb8
- SHA512
  
  435a274cc91cb233e17dbb6e8059a645d65e0e46580a512980f3d15f48e472837370e88fadb0d43efd1ef566614254c95e3d29a477cf27ee5f374d83d7988345
- SSDEEP
  
  1536:LpV5eEb0IdkPZHPQ2XH3di1JBBtvPCHz7bqvBw49mZ+LVO049unnuY:9V4EldkhHPB33wLtvKTfqq49mQLVO0iK
Score

6^/10

discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1