Overview

overview

10

Static

static

10

911503b802...335003

debian-9-armhf

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_d33b65a31bf6de59c2f9e98016968b9eee70bff414a5173db4f0d228509cf236

  • Size

    53KB

  • Sample

    241229-j73sjaxldz

  • MD5

    188ff5146d8e861c4bc2e2565f8e7aeb

  • SHA1

    21bc3714c98c60c4cdef838ffa624b70567a691f

  • SHA256

    d33b65a31bf6de59c2f9e98016968b9eee70bff414a5173db4f0d228509cf236

  • SHA512

    65bd40fd098c72dfb2655e64dd081f6535b27c430df3409e57baba40a206cf97cc798b745f6d96929e8b63f6e34111ff3bdcb90837501a7539c1d72b9d5ce229

  • SSDEEP

    1536:LX7hUgCYjZDBbfmWp7jdmxa+8Iutb79tzjb3BA/0h6YMX2:LX1FCYjZDBbf5mxUtH9zic342

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

45.140.188.40:450

Targets

    • Target

      911503b802fbecf94d55b858af87cbd38eae1b133f2eb6898f8b7f8ce5335003

    • Size

      124KB

    • MD5

      c6bf412d0388bbca9429f5eb01801c3b

    • SHA1

      bc21d2be98607855bf1b23884dd2d1e636e2e7ed

    • SHA256

      911503b802fbecf94d55b858af87cbd38eae1b133f2eb6898f8b7f8ce5335003

    • SHA512

      74a07be0e5fa8172277fec77ea01019036aa7fe22873ed5adf7b862b6d08f1d9a9c96a67cd9a3af488527ba4e061aa018ebe96239e05afba42ed4b55cdca4adc

    • SSDEEP

      3072:KdB2qwap6KVXPi4jv8x+3MDkmDhZmTQOIsXAqE:aRwap6Kt6+3MDHZmTQOICAqE

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks