General

  • Target

    JaffaCakes118_3f4656b423f105ada96d31e30ccb38aff3e54e0158456d0e37a9feab9699dea4

  • Size

    42KB

  • MD5

    1cccc52ccabcd6d83e55e038ef4f8343

  • SHA1

    eff1bc711a6ae24a1a985f6dab290353a0a28571

  • SHA256

    3f4656b423f105ada96d31e30ccb38aff3e54e0158456d0e37a9feab9699dea4

  • SHA512

    bcc5e81b532fbbe48b7f8a28fbdd555a9d80bfd66b46cf57abfc56c24190680da9e27f6a4f85435b693e36595f9c49cfaf917614185789bcf86993c8e8ad0089

  • SSDEEP

    768:kHTzG4eAIa0myaVkQTNJXR09f2+IGVICdmkQYYOFf6LztAdbGZjC/LB:YGgFRTjX6f24dmGLfYJabGZu/N

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

138.68.174.56:1111

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • JaffaCakes118_3f4656b423f105ada96d31e30ccb38aff3e54e0158456d0e37a9feab9699dea4
    .zip

    Password: infected

  • bcb82c221915ff2b2174047d1d0d1b6b2ea3a3157a3edb338777fb13be8b781a.elf
    .elf linux mipsbe