Overview

overview

10

Static

static

10

b4a472d7db...kes118

ubuntu-24.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4a472d7dbede519e30904eed408ae1c_JaffaCakes118

  • Size

    152KB

  • Sample

    241130-ec3rtsvpdq

  • MD5

    b4a472d7dbede519e30904eed408ae1c

  • SHA1

    a64c6505dcac3819f52533d0db721285555e3f74

  • SHA256

    a8f67a24008fa03858fa96903fc6cddbc9eba2206da160efd89649d5eacf31fb

  • SHA512

    1ff24f5514abd3741b02761901147a39fa44cdc45a54b6b9a28c8f8410e2d6759b149cda61bba7a4ff17ac8449efab4be827ff8f7c49f1d53b240c8ac448ea07

  • SSDEEP

    3072:wE7OeImY/ysKUTPCiXF3aC6tegrjK1KhGLca0Y:wtTLbCiX1aC68grjK1KsLca0Y

Score
10/10
gafgytlinuxrootkit

Malware Config

Extracted

Family

gafgyt

C2

185.62.189.73:23

Targets

    • Target

      b4a472d7dbede519e30904eed408ae1c_JaffaCakes118

    • Size

      152KB

    • MD5

      b4a472d7dbede519e30904eed408ae1c

    • SHA1

      a64c6505dcac3819f52533d0db721285555e3f74

    • SHA256

      a8f67a24008fa03858fa96903fc6cddbc9eba2206da160efd89649d5eacf31fb

    • SHA512

      1ff24f5514abd3741b02761901147a39fa44cdc45a54b6b9a28c8f8410e2d6759b149cda61bba7a4ff17ac8449efab4be827ff8f7c49f1d53b240c8ac448ea07

    • SSDEEP

      3072:wE7OeImY/ysKUTPCiXF3aC6tegrjK1KhGLca0Y:wtTLbCiX1aC68grjK1KsLca0Y

    Score
    7/10
    rootkit

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit
    behavioral1

MITRE ATT&CK Matrix

Tasks