General

  • Target

    a9264b047c250a682580d20367302fea_JaffaCakes118

  • Size

    123KB

  • Sample

    241127-xb231svnhv

  • MD5

    a9264b047c250a682580d20367302fea

  • SHA1

    7a09fd4efabebfb0556448167f9129ede5d2da92

  • SHA256

    f8e38758f16c02f5e80c33d46723e2e0e56e2c909afbc06e0890992ae7b7dfd1

  • SHA512

    c90bec8ffbddc20da0f25d54e0439ced2d571773cf49298f5732471b4f748f209b610764e3d5a864482873ff6ad2ca09c2bdc197405dc9aaaf440240ba4e110d

  • SSDEEP

    1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8EpW+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8EM+Dw8rmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.85.90.203:3478

Targets

    • Target

      a9264b047c250a682580d20367302fea_JaffaCakes118

    • Size

      123KB

    • MD5

      a9264b047c250a682580d20367302fea

    • SHA1

      7a09fd4efabebfb0556448167f9129ede5d2da92

    • SHA256

      f8e38758f16c02f5e80c33d46723e2e0e56e2c909afbc06e0890992ae7b7dfd1

    • SHA512

      c90bec8ffbddc20da0f25d54e0439ced2d571773cf49298f5732471b4f748f209b610764e3d5a864482873ff6ad2ca09c2bdc197405dc9aaaf440240ba4e110d

    • SSDEEP

      1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8EpW+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8EM+Dw8rmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks