General

  • Target

    7cdc3dcc1bbf5818708439ea8c7e1b6b_JaffaCakes118

  • Size

    72KB

  • Sample

    240401-23129ahf4v

  • MD5

    7cdc3dcc1bbf5818708439ea8c7e1b6b

  • SHA1

    e62604132910ebc209454d28680368812fc241f5

  • SHA256

    78e79c37ea82c8a02f74f5b69315902ab75fdf850dcc447b3fe00aa9db72f407

  • SHA512

    a3f6f0165346e4d5e56287f378d063f44b3bcd3f11088b554d9c91bdd38b516af68f52886f87d51789ad65a67e040d5f305ff38daa49514394b582c5809b5348

  • SSDEEP

    1536:nm+c5osQWiKLoxKFn6pD+OTxzMQMmLI2VOCjXUfJRk:45omr0xKFn6J+OrMmU2VOCbUfJRk

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.148.121.228:839

Targets

    • Target

      7cdc3dcc1bbf5818708439ea8c7e1b6b_JaffaCakes118

    • Size

      72KB

    • MD5

      7cdc3dcc1bbf5818708439ea8c7e1b6b

    • SHA1

      e62604132910ebc209454d28680368812fc241f5

    • SHA256

      78e79c37ea82c8a02f74f5b69315902ab75fdf850dcc447b3fe00aa9db72f407

    • SHA512

      a3f6f0165346e4d5e56287f378d063f44b3bcd3f11088b554d9c91bdd38b516af68f52886f87d51789ad65a67e040d5f305ff38daa49514394b582c5809b5348

    • SSDEEP

      1536:nm+c5osQWiKLoxKFn6pD+OTxzMQMmLI2VOCjXUfJRk:45omr0xKFn6J+OrMmU2VOCbUfJRk

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks