General

  • Target

    97e2160c66d71b8a42befebd87281cf0_JaffaCakes118

  • Size

    97KB

  • Sample

    241124-3m9vws1rgp

  • MD5

    97e2160c66d71b8a42befebd87281cf0

  • SHA1

    93390f4c378f9b873c49fcb8c044bdb1a142e3e2

  • SHA256

    dcf00d9e291bb37887c5f558f710596b37a8a03abc482c00995c26e50ae08eec

  • SHA512

    4953cc265571b39a8ada66f48050927c029a3c1da91a9270a3b890348aeb6fe60543c7ba59262f8d008e614ef0a489ef595391c23fff84480fe2d798959373e5

  • SSDEEP

    3072:2K5ejA4jB4h89HOPQzM9FqVyL9W9vmrYuOHy+ZNzX:sHjBzuPQQdk9vmrYuOHy+ZNzX

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

209.141.43.226:332

Targets

    • Target

      97e2160c66d71b8a42befebd87281cf0_JaffaCakes118

    • Size

      97KB

    • MD5

      97e2160c66d71b8a42befebd87281cf0

    • SHA1

      93390f4c378f9b873c49fcb8c044bdb1a142e3e2

    • SHA256

      dcf00d9e291bb37887c5f558f710596b37a8a03abc482c00995c26e50ae08eec

    • SHA512

      4953cc265571b39a8ada66f48050927c029a3c1da91a9270a3b890348aeb6fe60543c7ba59262f8d008e614ef0a489ef595391c23fff84480fe2d798959373e5

    • SSDEEP

      3072:2K5ejA4jB4h89HOPQzM9FqVyL9W9vmrYuOHy+ZNzX:sHjBzuPQQdk9vmrYuOHy+ZNzX

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks