General

  • Target

    3c7cd2e4693a0b4c3bb8cc6ea7974c17_JaffaCakes118

  • Size

    143KB

  • Sample

    240330-qazg6sfh57

  • MD5

    3c7cd2e4693a0b4c3bb8cc6ea7974c17

  • SHA1

    ec19cff63c383c183715c9779cdee7f3ea673db4

  • SHA256

    c4e1ecf0ed37b0aaa176f7fd65138cc84c1f3f2ee112af3129ee9070e1aa03d8

  • SHA512

    ab184f0c638b8d6da08903f5b5bfbfa462ad19d4e2a007575b325c09e87c20c2b94284742323173b214b4facf07d66ee738b3f51577789bfe141213cc7f9dac6

  • SSDEEP

    3072:1Atu6SxI/5ZIUj6QP/5NOX6sILJ+DAlwgqVIiFhq1TB3OotUmkmZF01TpM2ke:omclhiFhqfUmkmZF01TpM2ke

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

107.174.46.89:717

Targets

    • Target

      3c7cd2e4693a0b4c3bb8cc6ea7974c17_JaffaCakes118

    • Size

      143KB

    • MD5

      3c7cd2e4693a0b4c3bb8cc6ea7974c17

    • SHA1

      ec19cff63c383c183715c9779cdee7f3ea673db4

    • SHA256

      c4e1ecf0ed37b0aaa176f7fd65138cc84c1f3f2ee112af3129ee9070e1aa03d8

    • SHA512

      ab184f0c638b8d6da08903f5b5bfbfa462ad19d4e2a007575b325c09e87c20c2b94284742323173b214b4facf07d66ee738b3f51577789bfe141213cc7f9dac6

    • SSDEEP

      3072:1Atu6SxI/5ZIUj6QP/5NOX6sILJ+DAlwgqVIiFhq1TB3OotUmkmZF01TpM2ke:omclhiFhqfUmkmZF01TpM2ke

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks