General
- Target 1d5682ac8e5fc9ee9216b68ac6a18dd1_JaffaCakes118
- Size 118KB
- Sample240506-trm29ada78
- SHA256 1a62a3d594acf6e050d57048c590fd8ff09927e04e76e746cb6e361f4e64537d
- MD5 1d5682ac8e5fc9ee9216b68ac6a18dd1
- SHA1 685ba0c501ee78a32d75ff50909a0bff1ba1ef7d
- SHA512 e38142dfb916c6b2b5279aa0f5377b508f0e00d4c14369cbf9fec26acc3bc58da1497ff07d778ae374bbb3271701a8364164518599dd5c41f825c817e43044c4
- SSDEEP 3072:KH8F4Nc19798rjvJ9QXNoGetJ8add9QzTsmio5Aw3zdt4WKcXeGXgxKe:OqXWnTeoGetJ8addQJxxzdt4WKcXdXgD
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
1d5682ac8e5fc9ee9216b68ac6a18dd1_JaffaCakes118
Resource
ubuntu1804-amd64-20240226-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
104.248.63.168:23
Targets
-
- Target 1d5682ac8e5fc9ee9216b68ac6a18dd1_JaffaCakes118
- Size 118KB
- SHA256 1a62a3d594acf6e050d57048c590fd8ff09927e04e76e746cb6e361f4e64537d
- MD5 1d5682ac8e5fc9ee9216b68ac6a18dd1
- SHA1 685ba0c501ee78a32d75ff50909a0bff1ba1ef7d
- SHA512 e38142dfb916c6b2b5279aa0f5377b508f0e00d4c14369cbf9fec26acc3bc58da1497ff07d778ae374bbb3271701a8364164518599dd5c41f825c817e43044c4
- SSDEEP 3072:KH8F4Nc19798rjvJ9QXNoGetJ8add9QzTsmio5Aw3zdt4WKcXeGXgxKe:OqXWnTeoGetJ8addQJxxzdt4WKcXdXgD
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.