General

  • Target

    dfc4ab91de752c37733374c5ea4b4a1d_JaffaCakes118

  • Size

    191KB

  • Sample

    240914-jn5ssatfkh

  • MD5

    dfc4ab91de752c37733374c5ea4b4a1d

  • SHA1

    14aeeb2e20d5d0fd8e0c968677cec1899431e5b4

  • SHA256

    d644a50484beb76bd3088be107cf160ebe201915f287e98c314ce622340117cb

  • SHA512

    dfbaf028737d82190db34a7acf3fbfc5eb3496f75f48d6805468b6d2f7edd6eb3318bf6cb62ad55070dc00ab2d3eedfd7ec434a9fde380a219af735bfd25e162

  • SSDEEP

    3072:KYq4CGXq11zXqwL5StNZf1t3aLUUGPNEibtNf8eNgJs12phvc5PsEsEUxxQLqJlp:Kl5nXrSN95pbpMoZCQ9gOS1SeX

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

68.183.75.210:812

Targets

    • Target

      dfc4ab91de752c37733374c5ea4b4a1d_JaffaCakes118

    • Size

      191KB

    • MD5

      dfc4ab91de752c37733374c5ea4b4a1d

    • SHA1

      14aeeb2e20d5d0fd8e0c968677cec1899431e5b4

    • SHA256

      d644a50484beb76bd3088be107cf160ebe201915f287e98c314ce622340117cb

    • SHA512

      dfbaf028737d82190db34a7acf3fbfc5eb3496f75f48d6805468b6d2f7edd6eb3318bf6cb62ad55070dc00ab2d3eedfd7ec434a9fde380a219af735bfd25e162

    • SSDEEP

      3072:KYq4CGXq11zXqwL5StNZf1t3aLUUGPNEibtNf8eNgJs12phvc5PsEsEUxxQLqJlp:Kl5nXrSN95pbpMoZCQ9gOS1SeX

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks