Resubmissions

09-12-2024 15:46

241209-s74jhaxnfp 10

General

  • Target

    da5d984354e61d851b50ba42d5f09105_JaffaCakes118

  • Size

    123KB

  • Sample

    241209-s74jhaxnfp

  • MD5

    da5d984354e61d851b50ba42d5f09105

  • SHA1

    7a7e7de91ae554469ec91032a0343b4bde671009

  • SHA256

    e70b682d51c26ef0d7ea5dcfe8f9469a187f6a103f4b95bd89c1b525f08d77ab

  • SHA512

    72b63f3025396b73f1ea98ca4a31f556690f4b329e5d4e1a17975ebfde17fddf5475266801c41592e2003d47338e39a1c5f8e3561e14a3659f6d29a4a213bd9e

  • SSDEEP

    1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBeKEdWfRZrmW+IFj:Ted0W0MZQHYd6RZrmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

209.141.35.230:777

Targets

    • Target

      da5d984354e61d851b50ba42d5f09105_JaffaCakes118

    • Size

      123KB

    • MD5

      da5d984354e61d851b50ba42d5f09105

    • SHA1

      7a7e7de91ae554469ec91032a0343b4bde671009

    • SHA256

      e70b682d51c26ef0d7ea5dcfe8f9469a187f6a103f4b95bd89c1b525f08d77ab

    • SHA512

      72b63f3025396b73f1ea98ca4a31f556690f4b329e5d4e1a17975ebfde17fddf5475266801c41592e2003d47338e39a1c5f8e3561e14a3659f6d29a4a213bd9e

    • SSDEEP

      1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBeKEdWfRZrmW+IFj:Ted0W0MZQHYd6RZrmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks