General

  • Target

    ff1bc275e66df1c892766aaaccf2bc98_JaffaCakes118

  • Size

    234KB

  • Sample

    241219-j4pfqswngt

  • MD5

    ff1bc275e66df1c892766aaaccf2bc98

  • SHA1

    a61cf161ee05b9fd3d0438f23807c754f3da0678

  • SHA256

    ece3146b59fe99a16c9c849ddd35b0a8e9a5dc3f575804755cc0e1cb6b711268

  • SHA512

    a9ac71bde9efb5963f249514f17794133950aecd0094736dad99889689f668f0819e371ecaa0aafeec3286433abedc098818b6bad69dac126bcaa89e4a8bbd22

  • SSDEEP

    3072:RinafG+iwBxtCeZ29Fri1BsKDqR/49qHEkuOSX:AqtVBOeQ9sBNqR/49qHEkuOSX

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.61.185.83:812

Targets

    • Target

      ff1bc275e66df1c892766aaaccf2bc98_JaffaCakes118

    • Size

      234KB

    • MD5

      ff1bc275e66df1c892766aaaccf2bc98

    • SHA1

      a61cf161ee05b9fd3d0438f23807c754f3da0678

    • SHA256

      ece3146b59fe99a16c9c849ddd35b0a8e9a5dc3f575804755cc0e1cb6b711268

    • SHA512

      a9ac71bde9efb5963f249514f17794133950aecd0094736dad99889689f668f0819e371ecaa0aafeec3286433abedc098818b6bad69dac126bcaa89e4a8bbd22

    • SSDEEP

      3072:RinafG+iwBxtCeZ29Fri1BsKDqR/49qHEkuOSX:AqtVBOeQ9sBNqR/49qHEkuOSX

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks