General

  • Target

    bd188fa9f8a6fdcc8381e7d8b03476c7_JaffaCakes118

  • Size

    97KB

  • Sample

    241203-m678easnbv

  • MD5

    bd188fa9f8a6fdcc8381e7d8b03476c7

  • SHA1

    914f2f6cc31c2941680fea0bc1037adbe53af786

  • SHA256

    5906899d27ad3fe4e5f2c3fa98e2f370885b0e053b40308e164759dc851b7e85

  • SHA512

    0943f976f82c75aec7c57a7540b8eb269d9f504ddaad8f1f27dd13c71270e451d0bc28ecc6853b144f450d43cc744f9dd2f99107f6b9566e26e8bbe456318034

  • SSDEEP

    3072:dUICodUWUh917j8mc2deiPUDAZURyPfR5hVT5vxinf0OzTyoQQub:tdRu917j8mc2H5Z5P55h1Vxinf0OzTyv

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

195.133.40.33:42516

Targets

    • Target

      bd188fa9f8a6fdcc8381e7d8b03476c7_JaffaCakes118

    • Size

      97KB

    • MD5

      bd188fa9f8a6fdcc8381e7d8b03476c7

    • SHA1

      914f2f6cc31c2941680fea0bc1037adbe53af786

    • SHA256

      5906899d27ad3fe4e5f2c3fa98e2f370885b0e053b40308e164759dc851b7e85

    • SHA512

      0943f976f82c75aec7c57a7540b8eb269d9f504ddaad8f1f27dd13c71270e451d0bc28ecc6853b144f450d43cc744f9dd2f99107f6b9566e26e8bbe456318034

    • SSDEEP

      3072:dUICodUWUh917j8mc2deiPUDAZURyPfR5hVT5vxinf0OzTyoQQub:tdRu917j8mc2H5Z5P55h1Vxinf0OzTyv

    Score
    7/10
    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

MITRE ATT&CK Matrix

Tasks