General

  • Target

    b5c34e18208b543c93e7f2aac86746fd_JaffaCakes118

  • Size

    110KB

  • Sample

    241201-3xvhystlcl

  • MD5

    b5c34e18208b543c93e7f2aac86746fd

  • SHA1

    06748301dac9fd61f403bda2b0bcd048aee4b776

  • SHA256

    faef9fc9a9e65fbaf1a95c741bc0c9e10fce8757e3ed0414680f4a9d20d22570

  • SHA512

    69b896253a416114b1713d017be36018a99691f5a0963fec60a686aa521734f9778cc8897f82a1f3b3d66b5cb1e6995140dabdd5c2c268cb4ae6bb23a629a64e

  • SSDEEP

    1536:27ju1Thpq+XvYC2rKy3eY5PGEEeRYYID8vECRIKmbaUmkiSFxfC7xbXe:RvYJPGEu/DF8IKmuUmkiSFxfKxbXe

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

192.3.15.116:839

Targets

    • Target

      b5c34e18208b543c93e7f2aac86746fd_JaffaCakes118

    • Size

      110KB

    • MD5

      b5c34e18208b543c93e7f2aac86746fd

    • SHA1

      06748301dac9fd61f403bda2b0bcd048aee4b776

    • SHA256

      faef9fc9a9e65fbaf1a95c741bc0c9e10fce8757e3ed0414680f4a9d20d22570

    • SHA512

      69b896253a416114b1713d017be36018a99691f5a0963fec60a686aa521734f9778cc8897f82a1f3b3d66b5cb1e6995140dabdd5c2c268cb4ae6bb23a629a64e

    • SSDEEP

      1536:27ju1Thpq+XvYC2rKy3eY5PGEEeRYYID8vECRIKmbaUmkiSFxfC7xbXe:RvYJPGEu/DF8IKmuUmkiSFxfKxbXe

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks