Overview

overview

10

Static

static

10

94868968b9...7cc30c

debian-9-armhf

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_3340bab36b4348412ca503ee0c1b0e4c65cf69ae5703ee8080fd6c88701205d6

  • Size

    75KB

  • Sample

    241223-w32e5axkhp

  • MD5

    b44c2038daf11df2aafe6368f081103c

  • SHA1

    c11a865b558d8f3e9e21e0e5b798d583404c9a5c

  • SHA256

    3340bab36b4348412ca503ee0c1b0e4c65cf69ae5703ee8080fd6c88701205d6

  • SHA512

    116423f2725c0cf8bb5341fdc58de8bdd0a40627e21f3864ed091d2a2156fb15fd39a080caa4624f5d60cfad6fbe0116dce3a01a2265a198814ef2f295d6bcbc

  • SSDEEP

    1536:8wZTgJnDX4Gc+0hsV3ikg80DL6RilMLjIr+k:8wZTgJnD42csVSt80H6J/jk

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

45.140.188.40:1194

Targets

    • Target

      94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c

    • Size

      210KB

    • MD5

      46267a81556ebcf0b55bd580d9b5d681

    • SHA1

      abd003e476c45ac626e2fce403a8006208bd08ba

    • SHA256

      94868968b95abcbbc4c5265cbb21de309333d533fcb0fd77e7b1d3e4e37cc30c

    • SHA512

      18704c2d0c1dd07ced7ab8d25deaa992f592c8c7e40d7b8a9eaf5feefe764855a0ad1c0fdf330fb4883763703835371aea8945231a23884664d49a5cb47edf1c

    • SSDEEP

      3072:RH2f5PcP0CaNeMKg04dXdb6TIYAlnoLi39IaGdx6Nc/9kixPOdVmN3Ko5yDOH/px:RH2talaC1Y60pIy9ciBRoPcmyW492hSk

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks