General

  • Target

    JaffaCakes118_d26155c7c195b89fb9e86379289595342710365f65fc5a69d56c73bba33e0591

  • Size

    42KB

  • MD5

    ed912e8119e666ebdcad954226543dfe

  • SHA1

    02775fb7ac613971dd217f4cadfe499ae40df706

  • SHA256

    d26155c7c195b89fb9e86379289595342710365f65fc5a69d56c73bba33e0591

  • SHA512

    66f5e19928260ea95a3f24af4d01557aec1700a7490281c0f9a3b35baf9b1d482980c9fe528a6683f0a71645d5f9cacccd1c0f3088f167b091edc33d730cde78

  • SSDEEP

    768:b3Dy+on+cHMGF03/oZ5/Ed2cu3f11LkUt7W4ObVyDQWFu+bCSPA6RkgyKFiB:LW+on+cHL2QZudfC11TLIsQEuhSo6By

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

138.68.174.56:1111

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • JaffaCakes118_d26155c7c195b89fb9e86379289595342710365f65fc5a69d56c73bba33e0591
    .zip

    Password: infected

  • bcb82c221915ff2b2174047d1d0d1b6b2ea3a3157a3edb338777fb13be8b781a.elf
    .elf linux mipsbe