General

  • Target

    3bc19d12a1e895d9fee065601c8c984b_JaffaCakes118

  • Size

    95KB

  • Sample

    240330-pgwt7aef8s

  • MD5

    3bc19d12a1e895d9fee065601c8c984b

  • SHA1

    f44257b51aed9c9ef3723c64199f2d19487d3f9b

  • SHA256

    d52c6e2bc002758945509abf5919d803c75b7a32290d274bf4e2daffda9957a6

  • SHA512

    3f6acfd820ad1d9a8cbc0d06f234c8b341bfa07b7c17c89c7346cfc65d8ffa4b2c7951b235b4ed0d50b8bedaea01c35e3d1ea7f6b84b5dd7615ba7492e1c58cd

  • SSDEEP

    1536:r7i7BoKPb2aMeYDIrVc3+eTjmdbc023SgSphbddddd5Z+Dum9HiVrHjDFZS5j:vGPC3BD2c3h+dbc0aTSphDrmFiVrHHFm

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

15.235.131.10:666

Targets

    • Target

      3bc19d12a1e895d9fee065601c8c984b_JaffaCakes118

    • Size

      95KB

    • MD5

      3bc19d12a1e895d9fee065601c8c984b

    • SHA1

      f44257b51aed9c9ef3723c64199f2d19487d3f9b

    • SHA256

      d52c6e2bc002758945509abf5919d803c75b7a32290d274bf4e2daffda9957a6

    • SHA512

      3f6acfd820ad1d9a8cbc0d06f234c8b341bfa07b7c17c89c7346cfc65d8ffa4b2c7951b235b4ed0d50b8bedaea01c35e3d1ea7f6b84b5dd7615ba7492e1c58cd

    • SSDEEP

      1536:r7i7BoKPb2aMeYDIrVc3+eTjmdbc023SgSphbddddd5Z+Dum9HiVrHjDFZS5j:vGPC3BD2c3h+dbc0aTSphDrmFiVrHHFm

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks