General

  • Target

    34d7d95c0a3b9138805688e1bc586a16_JaffaCakes118

  • Size

    92KB

  • Sample

    240330-ga5jraad43

  • MD5

    34d7d95c0a3b9138805688e1bc586a16

  • SHA1

    7e8f143756dfc577305fce8678fcd2d2ace3d285

  • SHA256

    42f7733efb9299efd82c35a95c0de1e5cf1726e057852500851179d7eb86464e

  • SHA512

    58f3c42e0751404e2d87ad74fc430a03694b5fbde935cef6f1fda5f75f5189bb8efcf5e82427a8207de9d02c6ae2e62067a6af57b964ddef6ca72cbc2d8a277e

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3CO0QmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKSCm/KWOXF7aR

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

142.4.196.193:909

Targets

    • Target

      34d7d95c0a3b9138805688e1bc586a16_JaffaCakes118

    • Size

      92KB

    • MD5

      34d7d95c0a3b9138805688e1bc586a16

    • SHA1

      7e8f143756dfc577305fce8678fcd2d2ace3d285

    • SHA256

      42f7733efb9299efd82c35a95c0de1e5cf1726e057852500851179d7eb86464e

    • SHA512

      58f3c42e0751404e2d87ad74fc430a03694b5fbde935cef6f1fda5f75f5189bb8efcf5e82427a8207de9d02c6ae2e62067a6af57b964ddef6ca72cbc2d8a277e

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3CO0QmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKSCm/KWOXF7aR

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks