General

  • Target

    JaffaCakes118_078c0413d03e3f405c0822d565a70d0d

  • Size

    113KB

  • Sample

    241231-glzgwaxngr

  • MD5

    078c0413d03e3f405c0822d565a70d0d

  • SHA1

    dc7554339b65c7d35bac9266f20b9a791e67ad18

  • SHA256

    7cadae50f53815c427d8920b5c13a35e58e15206ec475fa3cce15cf97edb13f7

  • SHA512

    916495788abde967742cec39e57869dd00f853541b8c9ff6f5b9caa64c8110161429edb9257e04c8e5fd1c5be9198fc6ae16a0f177148b41b405dce9f174570a

  • SSDEEP

    3072:C/4g3Kd1rD5hZmxgA9OKdwwjF9GhsR1Ae:O9anD5hZLHKdwwjF9GhsR1Ae

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

107.189.10.234:4258

Targets

    • Target

      JaffaCakes118_078c0413d03e3f405c0822d565a70d0d

    • Size

      113KB

    • MD5

      078c0413d03e3f405c0822d565a70d0d

    • SHA1

      dc7554339b65c7d35bac9266f20b9a791e67ad18

    • SHA256

      7cadae50f53815c427d8920b5c13a35e58e15206ec475fa3cce15cf97edb13f7

    • SHA512

      916495788abde967742cec39e57869dd00f853541b8c9ff6f5b9caa64c8110161429edb9257e04c8e5fd1c5be9198fc6ae16a0f177148b41b405dce9f174570a

    • SSDEEP

      3072:C/4g3Kd1rD5hZmxgA9OKdwwjF9GhsR1Ae:O9anD5hZLHKdwwjF9GhsR1Ae

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks