General

  • Target

    2d1d0820d945ef9a446e7da75e1b6595_JaffaCakes118

  • Size

    76KB

  • Sample

    240329-z6khkahh81

  • MD5

    2d1d0820d945ef9a446e7da75e1b6595

  • SHA1

    ea5450bd13f9a47d68760ba2e719320528f0c205

  • SHA256

    71013203bd0db8608ad9931183772f24a497d6c37dc388ebdb4dbdf626852d19

  • SHA512

    83fb5442dcd6c7f06b5ea39e45c86d27a58cf226abb5f2370b6d1ac70ad26779507f98ae7897347d73c6725be3a9c44ad8c6abb9eefca0f516a9bb2a0351ee44

  • SSDEEP

    1536:ehEqac7IrWe6ZKJHBLpyZfR+6t2mLI2VOCjXVfyRk:zqPN7wJHBFyjH2mU2VOCbVfyRk

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.231.68.60:1024

Targets

    • Target

      2d1d0820d945ef9a446e7da75e1b6595_JaffaCakes118

    • Size

      76KB

    • MD5

      2d1d0820d945ef9a446e7da75e1b6595

    • SHA1

      ea5450bd13f9a47d68760ba2e719320528f0c205

    • SHA256

      71013203bd0db8608ad9931183772f24a497d6c37dc388ebdb4dbdf626852d19

    • SHA512

      83fb5442dcd6c7f06b5ea39e45c86d27a58cf226abb5f2370b6d1ac70ad26779507f98ae7897347d73c6725be3a9c44ad8c6abb9eefca0f516a9bb2a0351ee44

    • SSDEEP

      1536:ehEqac7IrWe6ZKJHBLpyZfR+6t2mLI2VOCjXVfyRk:zqPN7wJHBFyjH2mU2VOCbVfyRk

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks