General

  • Target

    4dd84d6415ed2c30944c45c3a73db288_JaffaCakes118

  • Size

    114KB

  • Sample

    240331-fn3fwaeb5z

  • MD5

    4dd84d6415ed2c30944c45c3a73db288

  • SHA1

    a20c82295882ed9fab98579388f55d8644b821af

  • SHA256

    03d60a660cbad4b75e2a0a6b2058c9a4714e85aa7cfa0b58193cb9621e022f42

  • SHA512

    088aae99a42b2426b4cafab00d949a8c7ecd31ab04c02377592bb8a30f92b6baca5e06bbdcd2fd0af9e4a9862da4920a293e8a2d3f44abcf086b1bc05bb157df

  • SSDEEP

    3072:sSinHZfD1UaeOwNoEgb3yUmkixFxfKcgjQ:sSorCaeOLEgbCUmkixFxfKcgjQ

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

157.245.143.43:6149

Targets

    • Target

      4dd84d6415ed2c30944c45c3a73db288_JaffaCakes118

    • Size

      114KB

    • MD5

      4dd84d6415ed2c30944c45c3a73db288

    • SHA1

      a20c82295882ed9fab98579388f55d8644b821af

    • SHA256

      03d60a660cbad4b75e2a0a6b2058c9a4714e85aa7cfa0b58193cb9621e022f42

    • SHA512

      088aae99a42b2426b4cafab00d949a8c7ecd31ab04c02377592bb8a30f92b6baca5e06bbdcd2fd0af9e4a9862da4920a293e8a2d3f44abcf086b1bc05bb157df

    • SSDEEP

      3072:sSinHZfD1UaeOwNoEgb3yUmkixFxfKcgjQ:sSorCaeOLEgbCUmkixFxfKcgjQ

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks