General

  • Target

    c5641e0c3d0d27f3ab77d28cbdbda1a8_JaffaCakes118

  • Size

    146KB

  • Sample

    241205-cjtrdsymgk

  • MD5

    c5641e0c3d0d27f3ab77d28cbdbda1a8

  • SHA1

    ee4955d756bf62ba0b2b5c9dba0a4de0d6764c15

  • SHA256

    649ee31da5e928a7ff846102d1d9713908e4d11ddbdbcf79348304ce7584ad46

  • SHA512

    926498cb3cf9e7d40afa3286517ce94934833852ff9f49acfdf4788e54d83a74e8ced1abcab4fe1ff0c84056c325b8647434a9319240ab3d2cca330578402277

  • SSDEEP

    3072:Bn7aKpF4LSV9OdAKoxHcennFEM/9OD4bxCkEFvmpwfvRQfZn:l7aKpF4eVZKo5cenneM/9uvmpwfvafZn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

192.3.15.116:839

Targets

    • Target

      c5641e0c3d0d27f3ab77d28cbdbda1a8_JaffaCakes118

    • Size

      146KB

    • MD5

      c5641e0c3d0d27f3ab77d28cbdbda1a8

    • SHA1

      ee4955d756bf62ba0b2b5c9dba0a4de0d6764c15

    • SHA256

      649ee31da5e928a7ff846102d1d9713908e4d11ddbdbcf79348304ce7584ad46

    • SHA512

      926498cb3cf9e7d40afa3286517ce94934833852ff9f49acfdf4788e54d83a74e8ced1abcab4fe1ff0c84056c325b8647434a9319240ab3d2cca330578402277

    • SSDEEP

      3072:Bn7aKpF4LSV9OdAKoxHcennFEM/9OD4bxCkEFvmpwfvRQfZn:l7aKpF4eVZKo5cenneM/9uvmpwfvafZn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks