gafgyt | 55734f3e7ceefd13144b8d2f04f3c227465c6b4c75a5a6d8bf772f19c1e26c45 | Triage

Sharing

General

Target

89.250.72.36-mips-2024-12-31T133310.elf
Size

51KB
Sample

250101-cr5tmatjhm
MD5

4a6a5e3db369f3a1f929b2a190c9ff6d
SHA1

e92c77e705a6e5e604eae97cbbd00ed0e906c476
SHA256

55734f3e7ceefd13144b8d2f04f3c227465c6b4c75a5a6d8bf772f19c1e26c45
SHA512

08fb3a35b8a22436345230d88a41c372939c946549ab044aa2f46214ee5715c0aa50893cdea6cce10501ad463d7b6444ca5f5e7e57b0c2e9e186e41e9444dc09
SSDEEP

768:cky5aZ8KaU8ve2PNDT4PXqPuxbVyKPcGlPKPgnVGnI9kyzHWgkmzLoRsD8M:ckyhle2x4PXqKkKUGRK4VGn6z2gHcRsZ

Score

10^/10

gafgyt discovery

Malware Config

Extracted

Family

gafgyt

C2

89.250.72.36:666

Targets

- Target
  
  89.250.72.36-mips-2024-12-31T133310.elf
- Size
  
  51KB
- MD5
  
  4a6a5e3db369f3a1f929b2a190c9ff6d
- SHA1
  
  e92c77e705a6e5e604eae97cbbd00ed0e906c476
- SHA256
  
  55734f3e7ceefd13144b8d2f04f3c227465c6b4c75a5a6d8bf772f19c1e26c45
- SHA512
  
  08fb3a35b8a22436345230d88a41c372939c946549ab044aa2f46214ee5715c0aa50893cdea6cce10501ad463d7b6444ca5f5e7e57b0c2e9e186e41e9444dc09
- SSDEEP
  
  768:cky5aZ8KaU8ve2PNDT4PXqPuxbVyKPcGlPKPgnVGnI9kyzHWgkmzLoRsD8M:ckyhle2x4PXqKkKUGRK4VGn6z2gHcRsZ
Score

3^/10

discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1