General

  • Target

    eeeae6cd148f652ec2d1707fcd9b75fc_JaffaCakes118

  • Size

    83KB

  • Sample

    241214-qdm9bavkej

  • MD5

    eeeae6cd148f652ec2d1707fcd9b75fc

  • SHA1

    8e49a459c342041f18e8310cbc6b89762f8e04c6

  • SHA256

    2f27d956daba0ab8929402ec637ee8317c3f061ffd1e5f6e6ee1800c06eb72d3

  • SHA512

    8d9c51d866e824e98b949b3dac45602c06fc7be1bde1d10daf4469bfff8af801039437b7964b7d94b68af996a90db19ccf0f42dad637aaabaf71398bb52f95c7

  • SSDEEP

    1536:wBdmZwZVa4FJ3emC8AnzGpWHMvVyRtzemF+wVOz+sXcfW7k:9ZwZVa4P3emjACcsM3emEwVOz+ucfW7k

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

198.23.214.174:666

Targets

    • Target

      eeeae6cd148f652ec2d1707fcd9b75fc_JaffaCakes118

    • Size

      83KB

    • MD5

      eeeae6cd148f652ec2d1707fcd9b75fc

    • SHA1

      8e49a459c342041f18e8310cbc6b89762f8e04c6

    • SHA256

      2f27d956daba0ab8929402ec637ee8317c3f061ffd1e5f6e6ee1800c06eb72d3

    • SHA512

      8d9c51d866e824e98b949b3dac45602c06fc7be1bde1d10daf4469bfff8af801039437b7964b7d94b68af996a90db19ccf0f42dad637aaabaf71398bb52f95c7

    • SSDEEP

      1536:wBdmZwZVa4FJ3emC8AnzGpWHMvVyRtzemF+wVOz+sXcfW7k:9ZwZVa4P3emjACcsM3emEwVOz+ucfW7k

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks