General

  • Target

    a1c5ded31454f06a10be777c4d88a1fa_JaffaCakes118

  • Size

    171KB

  • Sample

    240817-jy7p5avhnb

  • MD5

    a1c5ded31454f06a10be777c4d88a1fa

  • SHA1

    9242d3ce9601a8b4aa4cf2da55192942e6e48ee2

  • SHA256

    462bd69ab0efcb6ebdbe84d78a58b32580fd1bf2b06a32abda4974ec120e1f3f

  • SHA512

    6d81b520f138da72f2588e54ed91fa6c7db99ef4778e91551c544642379a87ff82de4fa0c71e69f448e449857caa0848c99b4412016345606d27b4a3a7598a82

  • SSDEEP

    3072:rb2nWy9MdDFblJqD1W8oHnO5iEfsVweGBlbZYLcFg2gTNLPOLVPU8oJDHX:X5xOXiO5iEkwliLcFdgThPOLVPU8oJD3

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

137.74.148.234:433

Targets

    • Target

      a1c5ded31454f06a10be777c4d88a1fa_JaffaCakes118

    • Size

      171KB

    • MD5

      a1c5ded31454f06a10be777c4d88a1fa

    • SHA1

      9242d3ce9601a8b4aa4cf2da55192942e6e48ee2

    • SHA256

      462bd69ab0efcb6ebdbe84d78a58b32580fd1bf2b06a32abda4974ec120e1f3f

    • SHA512

      6d81b520f138da72f2588e54ed91fa6c7db99ef4778e91551c544642379a87ff82de4fa0c71e69f448e449857caa0848c99b4412016345606d27b4a3a7598a82

    • SSDEEP

      3072:rb2nWy9MdDFblJqD1W8oHnO5iEfsVweGBlbZYLcFg2gTNLPOLVPU8oJDHX:X5xOXiO5iEkwliLcFdgThPOLVPU8oJD3

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks