General
-
Target
20883684a6e331e99a13c6d1cc8e1a01_JaffaCakes118
-
Size
98KB
-
Sample
240329-navswagc76
-
MD5
20883684a6e331e99a13c6d1cc8e1a01
-
SHA1
f2dbf69fa2ad72e8671dd9ebd93a4b7c90b9f44a
-
SHA256
011b55a22d14e0b5a350f3db374dc948325e49cd24c4d45bac97ea94c6587a90
-
SHA512
30e8e968858fc18a1d7f26c759ef67ca4c9a5a1d3658283c996d68edf35b621350d901a0b474efa58d1f8acc1390a32241bf6e12a8b46541940d8efb45a4648a
-
SSDEEP
3072:VSx+i6mqaObhN/nPhVtIAmZuqQ4DPwXXtse:y6mRObn/nPCAmZuqQ4DPwXXtse
Behavioral task
behavioral1
Sample
20883684a6e331e99a13c6d1cc8e1a01_JaffaCakes118
Resource
debian9-armhf-20240226-en
Malware Config
Extracted
gafgyt
107.172.201.217:606
Targets
-
-
Target
20883684a6e331e99a13c6d1cc8e1a01_JaffaCakes118
-
Size
98KB
-
MD5
20883684a6e331e99a13c6d1cc8e1a01
-
SHA1
f2dbf69fa2ad72e8671dd9ebd93a4b7c90b9f44a
-
SHA256
011b55a22d14e0b5a350f3db374dc948325e49cd24c4d45bac97ea94c6587a90
-
SHA512
30e8e968858fc18a1d7f26c759ef67ca4c9a5a1d3658283c996d68edf35b621350d901a0b474efa58d1f8acc1390a32241bf6e12a8b46541940d8efb45a4648a
-
SSDEEP
3072:VSx+i6mqaObhN/nPhVtIAmZuqQ4DPwXXtse:y6mRObn/nPCAmZuqQ4DPwXXtse
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-