Overview

overview

10

Static

static

10

ce2d40597f...kes118

ubuntu-24.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce2d40597fa5d0f22988f2299f44eddf_JaffaCakes118

  • Size

    148KB

  • Sample

    241206-vyzkasymax

  • MD5

    ce2d40597fa5d0f22988f2299f44eddf

  • SHA1

    abeb9ac579cb0338ffcbfcc6dbae0f304bfee5c1

  • SHA256

    095777102b791d1046dc7f6fcd7f268d1170890e3ca55c55ef22858796b60142

  • SHA512

    f44e7fb4f933afdf275f50a8f3c68b56e18987f81657522a368c3867f4faae90db904dbf5730d8c9201c12cde490aeb6c22dce3d401e1778a81e3523b310fea2

  • SSDEEP

    3072:HuJc+Ga9UtxUVVpSE8JqMeOlVGXalhipRwWriH90PfNatph1:ZcQEx9Mtl2eIiH90PfNatph1

Score
10/10
gafgytlinuxrootkit

Malware Config

Extracted

Family

gafgyt

C2

45.61.185.83:812

Targets

    • Target

      ce2d40597fa5d0f22988f2299f44eddf_JaffaCakes118

    • Size

      148KB

    • MD5

      ce2d40597fa5d0f22988f2299f44eddf

    • SHA1

      abeb9ac579cb0338ffcbfcc6dbae0f304bfee5c1

    • SHA256

      095777102b791d1046dc7f6fcd7f268d1170890e3ca55c55ef22858796b60142

    • SHA512

      f44e7fb4f933afdf275f50a8f3c68b56e18987f81657522a368c3867f4faae90db904dbf5730d8c9201c12cde490aeb6c22dce3d401e1778a81e3523b310fea2

    • SSDEEP

      3072:HuJc+Ga9UtxUVVpSE8JqMeOlVGXalhipRwWriH90PfNatph1:ZcQEx9Mtl2eIiH90PfNatph1

    Score
    7/10
    rootkit

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit
    behavioral1

MITRE ATT&CK Matrix

Tasks