Behavioral task
behavioral1
Sample
c20800e9b3ca7fb8c40608d549d8a949_JaffaCakes118
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
c20800e9b3ca7fb8c40608d549d8a949_JaffaCakes118
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
c20800e9b3ca7fb8c40608d549d8a949_JaffaCakes118
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral4
Sample
c20800e9b3ca7fb8c40608d549d8a949_JaffaCakes118
Resource
debian9-mipsel-20240226-en
General
-
Target
c20800e9b3ca7fb8c40608d549d8a949_JaffaCakes118
-
Size
113KB
-
MD5
c20800e9b3ca7fb8c40608d549d8a949
-
SHA1
c3ffb28565749c2e5384c680c059c92cefc4a4cc
-
SHA256
7ee294acecd0cd7f2ffd84d01b736c27cd83971900d0e7731a64a6613bb794e2
-
SHA512
7602c402d5710d34a4107acf121ee9156c810bce21f10953488212cd903c5f0d7778367a5d877d44cf5932ac6f40f2fb6d0a35b6d17c7e3dcbfe4287ed0bce51
-
SSDEEP
3072:VHXvEkfe7FzrNTONhIQq5hawrEe62QnI0PDG4gQNcR:V3LEzrNTOAQq5hawA2QnI0PDG4gQNcR
Malware Config
Extracted
gafgyt
165.22.85.252:1209
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
c20800e9b3ca7fb8c40608d549d8a949_JaffaCakes118.elf linux ppc