General

  • Target

    JaffaCakes118_1cb46c114f67bdd599025f436396faae

  • Size

    92KB

  • Sample

    250106-lva8vstlev

  • MD5

    1cb46c114f67bdd599025f436396faae

  • SHA1

    2e6dd0582009bf407ed34e45784e27e30a4b8210

  • SHA256

    7ac0ac7493ce001d7628074e1e28d73e554eed5f350e316fe087c0ee8b98a38a

  • SHA512

    d1c65d77193f7aa66929ea3f7f1918ce33fd6a4a46c4430eb1a1e7c729a1fcd21707504d8fb4ba1fe851f70e4c8bd664ce28c13d97d32da9cf96d0abf8d7ba6c

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3oyPXfHpmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjK4ifJm/KWOXFE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

107.189.13.139:6969

Targets

    • Target

      JaffaCakes118_1cb46c114f67bdd599025f436396faae

    • Size

      92KB

    • MD5

      1cb46c114f67bdd599025f436396faae

    • SHA1

      2e6dd0582009bf407ed34e45784e27e30a4b8210

    • SHA256

      7ac0ac7493ce001d7628074e1e28d73e554eed5f350e316fe087c0ee8b98a38a

    • SHA512

      d1c65d77193f7aa66929ea3f7f1918ce33fd6a4a46c4430eb1a1e7c729a1fcd21707504d8fb4ba1fe851f70e4c8bd664ce28c13d97d32da9cf96d0abf8d7ba6c

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3oyPXfHpmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjK4ifJm/KWOXFE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks