General

  • Target

    JaffaCakes118_23f1e149a815ddc6100b38c59e9cee76

  • Size

    126KB

  • Sample

    241231-sjbtkswlay

  • MD5

    23f1e149a815ddc6100b38c59e9cee76

  • SHA1

    5a70aa9cf8332ba3bbf66893196909189084ec7b

  • SHA256

    1360dfe8780a5729624d2c14b3d922e1686b9fa9085f63c064cc8160e5163c51

  • SHA512

    c9655ff5908ba67394bca26ad12a467821ebe00878330b79bc0b0102e5dee6e6876484f739e78955433ec66904ad2b1967cc3391126e8b95ab71e0cb00fc9ceb

  • SSDEEP

    1536:wHeTcHuKjHYBZFTxbWe1pwggGqTNpqSmIH/MVOrmW+IFB1Df11hR/:wheb1p9qJc1QrmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

192.3.228.148:666

Targets

    • Target

      JaffaCakes118_23f1e149a815ddc6100b38c59e9cee76

    • Size

      126KB

    • MD5

      23f1e149a815ddc6100b38c59e9cee76

    • SHA1

      5a70aa9cf8332ba3bbf66893196909189084ec7b

    • SHA256

      1360dfe8780a5729624d2c14b3d922e1686b9fa9085f63c064cc8160e5163c51

    • SHA512

      c9655ff5908ba67394bca26ad12a467821ebe00878330b79bc0b0102e5dee6e6876484f739e78955433ec66904ad2b1967cc3391126e8b95ab71e0cb00fc9ceb

    • SSDEEP

      1536:wHeTcHuKjHYBZFTxbWe1pwggGqTNpqSmIH/MVOrmW+IFB1Df11hR/:wheb1p9qJc1QrmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks