General

  • Target

    da633762cd322ff370494022018940c5_JaffaCakes118

  • Size

    147KB

  • Sample

    240911-p4m6ka1eln

  • MD5

    da633762cd322ff370494022018940c5

  • SHA1

    be8d6fc2c856bc0af94aaff1746bf846fdbfe515

  • SHA256

    d44847247c860f5e3f1f7c7ecca6c827a579a688088d8e3976589ab7d11cb467

  • SHA512

    7818b0e8f3dac3a9ff3b94a4139b893c901b52e47950d28801bde7799eb22e2d119fc64302476cf471c94b92c1696ce25387f80e1ad49270ce37ce3ccf9a5274

  • SSDEEP

    3072:qdOXT+/EDGFDD5hkwvHfXbXfP3rMsBRTFgj4GM:qdOXsEDMDD5hbb33rMsBRTFgj4GM

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

165.227.125.239:282

Targets

    • Target

      da633762cd322ff370494022018940c5_JaffaCakes118

    • Size

      147KB

    • MD5

      da633762cd322ff370494022018940c5

    • SHA1

      be8d6fc2c856bc0af94aaff1746bf846fdbfe515

    • SHA256

      d44847247c860f5e3f1f7c7ecca6c827a579a688088d8e3976589ab7d11cb467

    • SHA512

      7818b0e8f3dac3a9ff3b94a4139b893c901b52e47950d28801bde7799eb22e2d119fc64302476cf471c94b92c1696ce25387f80e1ad49270ce37ce3ccf9a5274

    • SSDEEP

      3072:qdOXT+/EDGFDD5hkwvHfXbXfP3rMsBRTFgj4GM:qdOXsEDMDD5hbb33rMsBRTFgj4GM

    Score
    7/10
    • Deletes itself

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks