General

  • Target

    c00a9c05a1b2b4eee418c1b668f73fb2_JaffaCakes118

  • Size

    151KB

  • Sample

    241204-a8l2qssrhv

  • MD5

    c00a9c05a1b2b4eee418c1b668f73fb2

  • SHA1

    81dd49308f3f48339dcb91b5430c7dace569d8f8

  • SHA256

    9cee501eea94103ec7c65c6439090292fcc0b5c76ca6678e09c776e1117a11b7

  • SHA512

    b2804d8ceb3db9c3faec24b75f4995f8200017e88e5922e261c4f0e085ddaf7cdeabde5bcc0362424b1aceb739f1538313b50539a0531cdad1e4cbf934936bf9

  • SSDEEP

    3072:4BnNe/0U6mO2XbC+ZCb9mQil3Iskn1AtrjK1KhGLca0Y:vMuVte9mQiVxtrjK1KsLca0Y

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.62.189.73:23

Targets

    • Target

      c00a9c05a1b2b4eee418c1b668f73fb2_JaffaCakes118

    • Size

      151KB

    • MD5

      c00a9c05a1b2b4eee418c1b668f73fb2

    • SHA1

      81dd49308f3f48339dcb91b5430c7dace569d8f8

    • SHA256

      9cee501eea94103ec7c65c6439090292fcc0b5c76ca6678e09c776e1117a11b7

    • SHA512

      b2804d8ceb3db9c3faec24b75f4995f8200017e88e5922e261c4f0e085ddaf7cdeabde5bcc0362424b1aceb739f1538313b50539a0531cdad1e4cbf934936bf9

    • SSDEEP

      3072:4BnNe/0U6mO2XbC+ZCb9mQil3Iskn1AtrjK1KhGLca0Y:vMuVte9mQiVxtrjK1KsLca0Y

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks