General

  • Target

    fa49781bbfafe3fd29f93f57982b2660_JaffaCakes118

  • Size

    156KB

  • Sample

    241218-f699fawpfj

  • MD5

    fa49781bbfafe3fd29f93f57982b2660

  • SHA1

    4e94479957645804875f4777f5c9e06915372947

  • SHA256

    ac82d99b1ec523b4fd42052d1f05b4384c57bb663ac9eff28f62528187d62541

  • SHA512

    737862e8ebee8a3e6105f09ce3513372bfd0766d4738a8acdbefdcca012d7eded66325363d91038922d46a4c22f75a0926af598cb4904ec8b4fa573255f131d9

  • SSDEEP

    3072:T1g2/eINNlzx2kkQCMOaQcvB6YnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/gYnydM/9MmFwfBxE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.61.184.168:606

Targets

    • Target

      fa49781bbfafe3fd29f93f57982b2660_JaffaCakes118

    • Size

      156KB

    • MD5

      fa49781bbfafe3fd29f93f57982b2660

    • SHA1

      4e94479957645804875f4777f5c9e06915372947

    • SHA256

      ac82d99b1ec523b4fd42052d1f05b4384c57bb663ac9eff28f62528187d62541

    • SHA512

      737862e8ebee8a3e6105f09ce3513372bfd0766d4738a8acdbefdcca012d7eded66325363d91038922d46a4c22f75a0926af598cb4904ec8b4fa573255f131d9

    • SSDEEP

      3072:T1g2/eINNlzx2kkQCMOaQcvB6YnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/gYnydM/9MmFwfBxE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks