gafgyt | 08e85c9213e022eeae78bc62db1c12e12204e432f77507e3e30c532056b2f915 | Triage

Sharing

General

Target

bd6157d716b1e1716bf56258cf9c6d60_JaffaCakes118
Size

161KB
Sample

240619-vgnfpsthng
MD5

bd6157d716b1e1716bf56258cf9c6d60
SHA1

0fcc5fc5577f77b83fdc35cb87afcaa8dce975f7
SHA256

08e85c9213e022eeae78bc62db1c12e12204e432f77507e3e30c532056b2f915
SHA512

432b9d2824e50b9cbb153498442e4dcbe6351c293e9ab5b85115207dcc18b50e8548537c112b8ca46595b0862c8da176a778726d0da2f351be508b8bdfb0b323
SSDEEP

3072:fywgcFqA5RXHX72MORPiXVNvYXLBYwArfyDujp+SmjlliUmh:lvFKMOZUNvYXLyPKDujp+SmjlliUmh

Score

10^/10

gafgyt discovery

Malware Config

Targets

- Target
  
  bd6157d716b1e1716bf56258cf9c6d60_JaffaCakes118
- Size
  
  161KB
- MD5
  
  bd6157d716b1e1716bf56258cf9c6d60
- SHA1
  
  0fcc5fc5577f77b83fdc35cb87afcaa8dce975f7
- SHA256
  
  08e85c9213e022eeae78bc62db1c12e12204e432f77507e3e30c532056b2f915
- SHA512
  
  432b9d2824e50b9cbb153498442e4dcbe6351c293e9ab5b85115207dcc18b50e8548537c112b8ca46595b0862c8da176a778726d0da2f351be508b8bdfb0b323
- SSDEEP
  
  3072:fywgcFqA5RXHX72MORPiXVNvYXLBYwArfyDujp+SmjlliUmh:lvFKMOZUNvYXLyPKDujp+SmjlliUmh
Score

9^/10

discovery
- Contacts a large (70200) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1