General

  • Target

    e093c8bb0e53257c20f126e4f5fd8135_JaffaCakes118

  • Size

    92KB

  • Sample

    241211-j3d9daypcn

  • MD5

    e093c8bb0e53257c20f126e4f5fd8135

  • SHA1

    a47196fbf66f595c4a8e9955af5c0d08313c61ae

  • SHA256

    e98d2bf04f3f01a15d50898a67f8383f4f58a92b35440f5100d3c601582d6611

  • SHA512

    1a1e960aa6e210aa137e38acd0bab956b2ca2633697535fa8cb762f1d6f1f94fb4bdff6108e911045bcf362fb9588c522605b2453e4d96557ee34cb19f3063dc

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3iyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKyifUm/KWOXFE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.95.168.119:12345

Targets

    • Target

      e093c8bb0e53257c20f126e4f5fd8135_JaffaCakes118

    • Size

      92KB

    • MD5

      e093c8bb0e53257c20f126e4f5fd8135

    • SHA1

      a47196fbf66f595c4a8e9955af5c0d08313c61ae

    • SHA256

      e98d2bf04f3f01a15d50898a67f8383f4f58a92b35440f5100d3c601582d6611

    • SHA512

      1a1e960aa6e210aa137e38acd0bab956b2ca2633697535fa8cb762f1d6f1f94fb4bdff6108e911045bcf362fb9588c522605b2453e4d96557ee34cb19f3063dc

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3iyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKyifUm/KWOXFE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks