General

  • Target
    85fdbd727286d2e467c91b428d27434a_JaffaCakes118
  • Size 130KB
  • Sample240531-e8wndsfc2z
  • SHA256 c8e8cd5e50e91f3f8dfaa95e015c3d9b2e8b364eeb58fa7d1c0ac64e03809f88
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • gafgyt

C2
  • 127.0.0.1:7547

Targets

    • Target
      85fdbd727286d2e467c91b428d27434a_JaffaCakes118
    • Size 130KB
    • SHA256 c8e8cd5e50e91f3f8dfaa95e015c3d9b2e8b364eeb58fa7d1c0ac64e03809f88
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    • Contacts a large (9777) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks