General

  • Target

    e888cf7dfcde26f3b90fc7435ea4a816_JaffaCakes118

  • Size

    116KB

  • Sample

    240918-hf8c9sxhkq

  • MD5

    e888cf7dfcde26f3b90fc7435ea4a816

  • SHA1

    8d0d0d54ad95dc7c09f7e4868842b58c9cbdfae3

  • SHA256

    eac98a5af6955e7253f90e15eb82e34e20ee68fd79a477dc209db13270172b85

  • SHA512

    c317301770da6457d44906c341feeb294bf85d198fbfcd1189920d55d6d8228c92e0bbc50a9f65713195360e51c932e0d9b62a2c5a7d3d46da6c03297d0ef1e2

  • SSDEEP

    3072:nDPx3z4BolIIOdDm2etJ8au49QuTsj2og5+rngxAtc4kG7gyqc:nt1ITdDdetJ8au4lkZgxAtc4n7gyqc

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.244.25.147:1337

Targets

    • Target

      e888cf7dfcde26f3b90fc7435ea4a816_JaffaCakes118

    • Size

      116KB

    • MD5

      e888cf7dfcde26f3b90fc7435ea4a816

    • SHA1

      8d0d0d54ad95dc7c09f7e4868842b58c9cbdfae3

    • SHA256

      eac98a5af6955e7253f90e15eb82e34e20ee68fd79a477dc209db13270172b85

    • SHA512

      c317301770da6457d44906c341feeb294bf85d198fbfcd1189920d55d6d8228c92e0bbc50a9f65713195360e51c932e0d9b62a2c5a7d3d46da6c03297d0ef1e2

    • SSDEEP

      3072:nDPx3z4BolIIOdDm2etJ8au49QuTsj2og5+rngxAtc4kG7gyqc:nt1ITdDdetJ8au4lkZgxAtc4n7gyqc

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks