General

  • Target

    JaffaCakes118_2c455ad2ef60412bc63da0afcce8c87c

  • Size

    110KB

  • Sample

    250106-s815rszraw

  • MD5

    2c455ad2ef60412bc63da0afcce8c87c

  • SHA1

    cc3d15a489f2068c7868b140ac85227c4a11ad14

  • SHA256

    3158647e616c011251d7510fa692f7a481b98fe69f59f138a16598211ac23e7f

  • SHA512

    8b825e0d571656dbe30e61042b69a2a3d80739f88d95a85967f634edb56d2403f86aa3ff196aa97d4ef39a417f4c0d618e8241d08d9aff99c0f638759db3575e

  • SSDEEP

    3072:R/4tNF9U4vvcKw6J73x8UmkiSFxfKxbXe:BUNFK+c8T8UmkiSFxfKxbXe

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

85.237.217.174:839

Targets

    • Target

      JaffaCakes118_2c455ad2ef60412bc63da0afcce8c87c

    • Size

      110KB

    • MD5

      2c455ad2ef60412bc63da0afcce8c87c

    • SHA1

      cc3d15a489f2068c7868b140ac85227c4a11ad14

    • SHA256

      3158647e616c011251d7510fa692f7a481b98fe69f59f138a16598211ac23e7f

    • SHA512

      8b825e0d571656dbe30e61042b69a2a3d80739f88d95a85967f634edb56d2403f86aa3ff196aa97d4ef39a417f4c0d618e8241d08d9aff99c0f638759db3575e

    • SSDEEP

      3072:R/4tNF9U4vvcKw6J73x8UmkiSFxfKxbXe:BUNFK+c8T8UmkiSFxfKxbXe

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks