General

  • Target

    d28421968a5a36bf005c9112bee64cf0_JaffaCakes118

  • Size

    110KB

  • Sample

    241207-pzmz1asngx

  • MD5

    d28421968a5a36bf005c9112bee64cf0

  • SHA1

    b2b7b08e564836277ac268afe1182a5ec3fc2105

  • SHA256

    ad246f32545a76cd0ef1ffbf7aab0845653b08896a85de8db8443290fb8793ba

  • SHA512

    f83fa30de9872ecfffac034d1c2d9371efc0a889f20eeb4e25773ac7b76855b42b6752e083b51ab4e3f76581b208dacd0058c4c174fcefcc7ef095713f7562d8

  • SSDEEP

    3072:9lX2jKRi0ZDvCTpRv7DSubUmGVrQAXiUXouX:6j6ZUpRv7DImGVrQAXiUXouX

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

209.141.43.226:332

Targets

    • Target

      d28421968a5a36bf005c9112bee64cf0_JaffaCakes118

    • Size

      110KB

    • MD5

      d28421968a5a36bf005c9112bee64cf0

    • SHA1

      b2b7b08e564836277ac268afe1182a5ec3fc2105

    • SHA256

      ad246f32545a76cd0ef1ffbf7aab0845653b08896a85de8db8443290fb8793ba

    • SHA512

      f83fa30de9872ecfffac034d1c2d9371efc0a889f20eeb4e25773ac7b76855b42b6752e083b51ab4e3f76581b208dacd0058c4c174fcefcc7ef095713f7562d8

    • SSDEEP

      3072:9lX2jKRi0ZDvCTpRv7DSubUmGVrQAXiUXouX:6j6ZUpRv7DImGVrQAXiUXouX

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks