General

  • Target

    63c6d85559b44d79d216372517827972_JaffaCakes118

  • Size

    165KB

  • Sample

    240521-stadhaad6y

  • MD5

    63c6d85559b44d79d216372517827972

  • SHA1

    8985020fc686710bf2db1711d7b2253ab5b07f84

  • SHA256

    3931d01692cda560bf70ee01763421e196dc392cdbd8a230996675ba31013cda

  • SHA512

    b51aa5d4b6bd4b4ebc55f0749c818f380ad9964f861118c6ded53f881e1e0df3cf72575d9093f50b83e6aacf1c83df186f12c873caeb5e5da56a7055de7cb3a1

  • SSDEEP

    3072:tmmyioZQ6/DxaIKtGW0oludocxlXjKaQQbf/37M/9UUmHw/ZmKfo:gm6RrxaIKtGWxluBlXGaQQbf/LM/9UUo

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

127.0.0.1:80

Targets

    • Target

      63c6d85559b44d79d216372517827972_JaffaCakes118

    • Size

      165KB

    • MD5

      63c6d85559b44d79d216372517827972

    • SHA1

      8985020fc686710bf2db1711d7b2253ab5b07f84

    • SHA256

      3931d01692cda560bf70ee01763421e196dc392cdbd8a230996675ba31013cda

    • SHA512

      b51aa5d4b6bd4b4ebc55f0749c818f380ad9964f861118c6ded53f881e1e0df3cf72575d9093f50b83e6aacf1c83df186f12c873caeb5e5da56a7055de7cb3a1

    • SSDEEP

      3072:tmmyioZQ6/DxaIKtGW0oludocxlXjKaQQbf/37M/9UUmHw/ZmKfo:gm6RrxaIKtGWxluBlXGaQQbf/LM/9UUo

    Score
    9/10
    • Contacts a large (170976) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks