General

  • Target

    97ac82848453361c5ee8eafbed018756_JaffaCakes118

  • Size

    155KB

  • Sample

    241124-2vsqxatrdx

  • MD5

    97ac82848453361c5ee8eafbed018756

  • SHA1

    9675041e453da14554730d47f0abb1771630d7b2

  • SHA256

    16c3b6f27c53fdffc2d71cdbf8ad2ac7317c79eda14eb6b6dccc84eec0bcd9ef

  • SHA512

    7c2e81e56def92c8ba56c962f49c322ba77fe4b3308d601ae59d890ceceaee29ee5ffe3dc4b0dc26846a7bfa71791c4df7256a70725240b74e4dc7fe8890e20c

  • SSDEEP

    3072:LrNIUal81lnQ0oEF8pio6NMsnNLSM/9pPF/mhwfvKQnvn:L+Uay1lndolio0MsnNuM/9pPF/mhwfvl

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

107.175.64.119:8080

Targets

    • Target

      97ac82848453361c5ee8eafbed018756_JaffaCakes118

    • Size

      155KB

    • MD5

      97ac82848453361c5ee8eafbed018756

    • SHA1

      9675041e453da14554730d47f0abb1771630d7b2

    • SHA256

      16c3b6f27c53fdffc2d71cdbf8ad2ac7317c79eda14eb6b6dccc84eec0bcd9ef

    • SHA512

      7c2e81e56def92c8ba56c962f49c322ba77fe4b3308d601ae59d890ceceaee29ee5ffe3dc4b0dc26846a7bfa71791c4df7256a70725240b74e4dc7fe8890e20c

    • SSDEEP

      3072:LrNIUal81lnQ0oEF8pio6NMsnNLSM/9pPF/mhwfvKQnvn:L+Uay1lndolio0MsnNuM/9pPF/mhwfvl

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks