General

  • Target

    852b3306e68b188ac2b93c0e7acb773e_JaffaCakes118

  • Size

    127KB

  • Sample

    240402-gc1ctahh5v

  • MD5

    852b3306e68b188ac2b93c0e7acb773e

  • SHA1

    08599f0551838cb5bc16163782231bb15fff8b8c

  • SHA256

    8afa2b0e1f9b0e7336d0393f70eb2587f4aafdbc4dff8044859dac49782ab339

  • SHA512

    e8b701fb55824b4daa5bd67378471aa9d419d99f5a70c9c120a512b185dcc7d006245c4910e391c2dbdf5aee64aae3c0df96a5b1baa85ba8cc16ef670a06a659

  • SSDEEP

    1536:XdbeTTaKeNHLgKMzZtkTP3qoVO38wbyWWjbYUmkg4Fx1Df7xbxs:Xd+KgBQO3PWnYUmkg4Fx1DDxbxs

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

149.56.35.183:909

Targets

    • Target

      852b3306e68b188ac2b93c0e7acb773e_JaffaCakes118

    • Size

      127KB

    • MD5

      852b3306e68b188ac2b93c0e7acb773e

    • SHA1

      08599f0551838cb5bc16163782231bb15fff8b8c

    • SHA256

      8afa2b0e1f9b0e7336d0393f70eb2587f4aafdbc4dff8044859dac49782ab339

    • SHA512

      e8b701fb55824b4daa5bd67378471aa9d419d99f5a70c9c120a512b185dcc7d006245c4910e391c2dbdf5aee64aae3c0df96a5b1baa85ba8cc16ef670a06a659

    • SSDEEP

      1536:XdbeTTaKeNHLgKMzZtkTP3qoVO38wbyWWjbYUmkg4Fx1Df7xbxs:Xd+KgBQO3PWnYUmkg4Fx1DDxbxs

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks