General

  • Target

    c188178991a40034ea329d4441efca46_JaffaCakes118

  • Size

    152KB

  • MD5

    c188178991a40034ea329d4441efca46

  • SHA1

    52dc7c89e28b4e0127a45ef60723d9fe79b52257

  • SHA256

    4de09b0a1f9334538c48bfe12a3f690ebf2dc1a8c815e5a79dc435dae5325e79

  • SHA512

    467ecf35003ba7f1afbbb39f0775ced9a8e1b29c520b751614509cd8d058ef5b4d85eb49f02f047bba9bd8e62cb13c68bc53836a2357ffcc9e41471b2c2a6982

  • SSDEEP

    3072:sAxNKau7iQr9i56lZ8iuLMDW/G2VZ+M/932m+wsBUaQsoI:1jKau7iQr9u6lULMDGG2VsM/9mm+wsBJ

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

205.185.118.156:713

Signatures

  • Contains strings common to LOLSquad DDoS tools 1 IoCs

    Resembles a range of public tools written in C intended for DDoS attacks.

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • c188178991a40034ea329d4441efca46_JaffaCakes118
    .elf linux arm