General

  • Target

    JaffaCakes118_ac83958e4f7ba86cf8983549e954052d

  • Size

    83KB

  • Sample

    250105-sk8vpsxpav

  • MD5

    ac83958e4f7ba86cf8983549e954052d

  • SHA1

    f2268739835f00cc00bfb33500cdda95fec4e08f

  • SHA256

    e66209fd451916a008eb1a383507ef4be806e0533e83dee9d191d3bbbd865b1a

  • SHA512

    925c69fc7110dcd5f8719fe4d23917f9b11328b891357f8d72590a472222ae9cfc92ab969ac7d3bcb20eb5b4c4adec96498aacbc266379d150aef3a4bfe0369c

  • SSDEEP

    1536:W35b9Vc4N3J6lreu5r4hWj8LNWDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0YZ2oRmEwVOz+ucfW7k

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.148.120.171:666

Targets

    • Target

      JaffaCakes118_ac83958e4f7ba86cf8983549e954052d

    • Size

      83KB

    • MD5

      ac83958e4f7ba86cf8983549e954052d

    • SHA1

      f2268739835f00cc00bfb33500cdda95fec4e08f

    • SHA256

      e66209fd451916a008eb1a383507ef4be806e0533e83dee9d191d3bbbd865b1a

    • SHA512

      925c69fc7110dcd5f8719fe4d23917f9b11328b891357f8d72590a472222ae9cfc92ab969ac7d3bcb20eb5b4c4adec96498aacbc266379d150aef3a4bfe0369c

    • SSDEEP

      1536:W35b9Vc4N3J6lreu5r4hWj8LNWDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0YZ2oRmEwVOz+ucfW7k

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks