General

  • Target

    ff387cccdbd60ee74b26d934bab9efec_JaffaCakes118

  • Size

    70KB

  • Sample

    240929-x6hmvs1dlh

  • MD5

    ff387cccdbd60ee74b26d934bab9efec

  • SHA1

    fbf0c61deba90160a17d8f156cd7920d45375ec7

  • SHA256

    8c7b8bb77f4420e6f22b856e1ee722789a607ccfa26dd3e15e3f241d4734196c

  • SHA512

    c7982868bdd92193ed0282d571cbe4ffdf524acae796e3926c626ec3cca02e0f86aa3fd487b7ac9254a8eb2fbe901b0b016a7cea307c8714a1e8e88d26b65db9

  • SSDEEP

    1536:wuaBNnGQEV8+494o9nlmqe8ThfZ9iZSggmd+lVOCjUxfg71:wuiAQ4DeVplLFfz0SggmMlVOCAxfg71

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

178.62.63.52:666

Targets

    • Target

      ff387cccdbd60ee74b26d934bab9efec_JaffaCakes118

    • Size

      70KB

    • MD5

      ff387cccdbd60ee74b26d934bab9efec

    • SHA1

      fbf0c61deba90160a17d8f156cd7920d45375ec7

    • SHA256

      8c7b8bb77f4420e6f22b856e1ee722789a607ccfa26dd3e15e3f241d4734196c

    • SHA512

      c7982868bdd92193ed0282d571cbe4ffdf524acae796e3926c626ec3cca02e0f86aa3fd487b7ac9254a8eb2fbe901b0b016a7cea307c8714a1e8e88d26b65db9

    • SSDEEP

      1536:wuaBNnGQEV8+494o9nlmqe8ThfZ9iZSggmd+lVOCjUxfg71:wuiAQ4DeVplLFfz0SggmMlVOCAxfg71

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks