General
- Target 3bc19d12a1e895d9fee065601c8c984b_JaffaCakes118
- Size 95KB
- Sample240330-pgwt7aef8s
- SHA256 d52c6e2bc002758945509abf5919d803c75b7a32290d274bf4e2daffda9957a6
- MD5 3bc19d12a1e895d9fee065601c8c984b
- SHA1 f44257b51aed9c9ef3723c64199f2d19487d3f9b
- SHA512 3f6acfd820ad1d9a8cbc0d06f234c8b341bfa07b7c17c89c7346cfc65d8ffa4b2c7951b235b4ed0d50b8bedaea01c35e3d1ea7f6b84b5dd7615ba7492e1c58cd
- SSDEEP 1536:r7i7BoKPb2aMeYDIrVc3+eTjmdbc023SgSphbddddd5Z+Dum9HiVrHjDFZS5j:vGPC3BD2c3h+dbc0aTSphDrmFiVrHHFm
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
3bc19d12a1e895d9fee065601c8c984b_JaffaCakes118
Resource
ubuntu2004-amd64-20240221-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
15.235.131.10:666
Targets
-
- Target 3bc19d12a1e895d9fee065601c8c984b_JaffaCakes118
- Size 95KB
- SHA256 d52c6e2bc002758945509abf5919d803c75b7a32290d274bf4e2daffda9957a6
- MD5 3bc19d12a1e895d9fee065601c8c984b
- SHA1 f44257b51aed9c9ef3723c64199f2d19487d3f9b
- SHA512 3f6acfd820ad1d9a8cbc0d06f234c8b341bfa07b7c17c89c7346cfc65d8ffa4b2c7951b235b4ed0d50b8bedaea01c35e3d1ea7f6b84b5dd7615ba7492e1c58cd
- SSDEEP 1536:r7i7BoKPb2aMeYDIrVc3+eTjmdbc023SgSphbddddd5Z+Dum9HiVrHjDFZS5j:vGPC3BD2c3h+dbc0aTSphDrmFiVrHHFm
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.