General

  • Target

    2735737c77be06bc3b5dbbe776f6622d_JaffaCakes118

  • Size

    107KB

  • Sample

    240329-t77rladc53

  • MD5

    2735737c77be06bc3b5dbbe776f6622d

  • SHA1

    25e84ebe73501db34028e169f961fa50c2396afe

  • SHA256

    a5fc6ab694fa27f8fb946de5588ce121f37c7d5a5d9f8844fbfae5b6cf89b86f

  • SHA512

    3635045e7078745ad12e028a8a073867e0435417f92e1ad1b8a752d306c4311b122773f61062c6cdb8361f818a7500f2ad789d4307e548590bb3c49b1cb00a35

  • SSDEEP

    3072:S0f8p7WsaXNQRkR972E7p1kq6hUxXGqFomLuqQEDIBVXFkQ:NmaXN3d2E7p7J7emLuqQEDIBVXFkQ

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

176.126.175.205:55101

Targets

    • Target

      2735737c77be06bc3b5dbbe776f6622d_JaffaCakes118

    • Size

      107KB

    • MD5

      2735737c77be06bc3b5dbbe776f6622d

    • SHA1

      25e84ebe73501db34028e169f961fa50c2396afe

    • SHA256

      a5fc6ab694fa27f8fb946de5588ce121f37c7d5a5d9f8844fbfae5b6cf89b86f

    • SHA512

      3635045e7078745ad12e028a8a073867e0435417f92e1ad1b8a752d306c4311b122773f61062c6cdb8361f818a7500f2ad789d4307e548590bb3c49b1cb00a35

    • SSDEEP

      3072:S0f8p7WsaXNQRkR972E7p1kq6hUxXGqFomLuqQEDIBVXFkQ:NmaXN3d2E7p7J7emLuqQEDIBVXFkQ

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks