General

  • Target

    9ffd16e64f31b0c96e2953f7f5fd443b_JaffaCakes118

  • Size

    127KB

  • Sample

    241126-fsvltswldv

  • MD5

    9ffd16e64f31b0c96e2953f7f5fd443b

  • SHA1

    57604676b2c6f76a19ab0f8d0ceaa1780aa775c3

  • SHA256

    be1aab3c7f7b1a31a4480e382a833cfbed3edaa39891d77dc7d30f786dbb8d22

  • SHA512

    912cc4109081278a63bbe9c46b0cda279edad5905332c5ab5f48fba22f25374fba726d8c77b979c6b91ac06d9038f886340ecbef3f2cc1ecbe08ae3c17b11a0c

  • SSDEEP

    3072:XHz0QOD5sNkVF4KzVuaeb36omJuADOfdnsi3lmygQ0xhp1RB:BKzsaQCuADO1mygQ0xX1RB

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.22.154.112:917

Targets

    • Target

      9ffd16e64f31b0c96e2953f7f5fd443b_JaffaCakes118

    • Size

      127KB

    • MD5

      9ffd16e64f31b0c96e2953f7f5fd443b

    • SHA1

      57604676b2c6f76a19ab0f8d0ceaa1780aa775c3

    • SHA256

      be1aab3c7f7b1a31a4480e382a833cfbed3edaa39891d77dc7d30f786dbb8d22

    • SHA512

      912cc4109081278a63bbe9c46b0cda279edad5905332c5ab5f48fba22f25374fba726d8c77b979c6b91ac06d9038f886340ecbef3f2cc1ecbe08ae3c17b11a0c

    • SSDEEP

      3072:XHz0QOD5sNkVF4KzVuaeb36omJuADOfdnsi3lmygQ0xhp1RB:BKzsaQCuADO1mygQ0xX1RB

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks