General

  • Target

    ebbbec3c7f8692056d0120e289ec2a00_JaffaCakes118

  • Size

    114KB

  • Sample

    241213-qsewgs1qdk

  • MD5

    ebbbec3c7f8692056d0120e289ec2a00

  • SHA1

    1e62a71acb8ca90f24055bfcfde3aebfd223a1db

  • SHA256

    7e843bd2208be1a251c5da579a7c7cbfb27116b263cd15a29206a99176ff32e0

  • SHA512

    e45766f8c5e36897f3c3c0b196f330bf4fe52fac555ed99773d37c783a95c9db4993a3e12d57caf9298ddf2adb9d88b4cd6b970880133f5aeca183b4dfcd9ade

  • SSDEEP

    1536:Ewf7jO1TUGquXg8heYbyy2rK28IWbQZYeJ4moGjaUCOAbqtFSUmkixFxfC7cgjQ:GeIbQZqhYEHbqaUmkixFxfKcgjQ

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

194.15.36.246:6149

Targets

    • Target

      ebbbec3c7f8692056d0120e289ec2a00_JaffaCakes118

    • Size

      114KB

    • MD5

      ebbbec3c7f8692056d0120e289ec2a00

    • SHA1

      1e62a71acb8ca90f24055bfcfde3aebfd223a1db

    • SHA256

      7e843bd2208be1a251c5da579a7c7cbfb27116b263cd15a29206a99176ff32e0

    • SHA512

      e45766f8c5e36897f3c3c0b196f330bf4fe52fac555ed99773d37c783a95c9db4993a3e12d57caf9298ddf2adb9d88b4cd6b970880133f5aeca183b4dfcd9ade

    • SSDEEP

      1536:Ewf7jO1TUGquXg8heYbyy2rK28IWbQZYeJ4moGjaUCOAbqtFSUmkixFxfC7cgjQ:GeIbQZqhYEHbqaUmkixFxfKcgjQ

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks