General

  • Target

    a0747e05fea06381491c436434ac157a_JaffaCakes118

  • Size

    129KB

  • Sample

    241126-hph5qswpbn

  • MD5

    a0747e05fea06381491c436434ac157a

  • SHA1

    dab212f5af258e2f2fd5494c320e5d91dec2424b

  • SHA256

    a81cb57ab024f8dfede4b6fcbd6910d81c23ffccc882789906f831aa6a6c2bb4

  • SHA512

    560f7ac3e1561d60ae0d3d259af72dac6fc94130023193658099366c0f92f8045537af69ce9009e8cf1d69d614757dcdffba078fd9d08069c05bc3703ecd37f7

  • SSDEEP

    3072:odQdvaK3eTOKZpjRHRnY6nYP/A+tZnI9zi2jmWQ9AKXNY8:0QdvaxTOknYP/czjmWQ9A8NY8

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

158.69.161.78:23

Targets

    • Target

      a0747e05fea06381491c436434ac157a_JaffaCakes118

    • Size

      129KB

    • MD5

      a0747e05fea06381491c436434ac157a

    • SHA1

      dab212f5af258e2f2fd5494c320e5d91dec2424b

    • SHA256

      a81cb57ab024f8dfede4b6fcbd6910d81c23ffccc882789906f831aa6a6c2bb4

    • SHA512

      560f7ac3e1561d60ae0d3d259af72dac6fc94130023193658099366c0f92f8045537af69ce9009e8cf1d69d614757dcdffba078fd9d08069c05bc3703ecd37f7

    • SSDEEP

      3072:odQdvaK3eTOKZpjRHRnY6nYP/A+tZnI9zi2jmWQ9AKXNY8:0QdvaxTOknYP/czjmWQ9A8NY8

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks