General

  • Target

    JaffaCakes118_dfbfa9e645482fd5f76636f20e79d14c4f8e9bf15a7b50f07fc26de7ede8e989

  • Size

    42KB

  • MD5

    8d8707806aaaf4b70c0586c3b53f46fb

  • SHA1

    982f274f571ec82b0d427c77fe8ec36ef10333ce

  • SHA256

    dfbfa9e645482fd5f76636f20e79d14c4f8e9bf15a7b50f07fc26de7ede8e989

  • SHA512

    92042d4fe18347275b168a7f58032bd3248173e903ec4c158a201e9ff0853340e46220581f31f7c8d807ca0c9ce4af1a8fd552b8dec9717c152db5940955ec30

  • SSDEEP

    768:A7xS9n9/9wS+aWwCGgbbruajBVIZg9aTDadqDLkXrBczsHmRXKv9LC1gWApzBkjY:Qx6FXjCGgvDKZlDadqDCBc7RavZQepz7

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

138.68.174.56:1111

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Gafgyt family

Files

  • JaffaCakes118_dfbfa9e645482fd5f76636f20e79d14c4f8e9bf15a7b50f07fc26de7ede8e989
    .zip

    Password: infected

  • bcb82c221915ff2b2174047d1d0d1b6b2ea3a3157a3edb338777fb13be8b781a.elf
    .elf linux mipsbe