General

  • Target

    JaffaCakes118_3261955e948c332811b87b54d4d28603

  • Size

    101KB

  • Sample

    250106-wmypastjfz

  • MD5

    3261955e948c332811b87b54d4d28603

  • SHA1

    dcf3b49b8cd645a4582be6982d9dc31509175af8

  • SHA256

    8a67d0a20f52f8b5913c588c4911eb1f4b337672589453853ae0c67779c33b36

  • SHA512

    b6566f7c999926f0f000615d200af102089c6139f95ee0ca5c3830ee94a9ff753eba7d2ad01f72a9f76a52a29f0d35cf067292eaaa258df603a7370a0ffacff2

  • SSDEEP

    3072:7e9h9oZt5hvFfKufS2faYj0+rQ0Knm4XATe:y9wZt5hNfKfpYj0+rQ0Knm4XATe

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

107.189.10.234:4258

Targets

    • Target

      JaffaCakes118_3261955e948c332811b87b54d4d28603

    • Size

      101KB

    • MD5

      3261955e948c332811b87b54d4d28603

    • SHA1

      dcf3b49b8cd645a4582be6982d9dc31509175af8

    • SHA256

      8a67d0a20f52f8b5913c588c4911eb1f4b337672589453853ae0c67779c33b36

    • SHA512

      b6566f7c999926f0f000615d200af102089c6139f95ee0ca5c3830ee94a9ff753eba7d2ad01f72a9f76a52a29f0d35cf067292eaaa258df603a7370a0ffacff2

    • SSDEEP

      3072:7e9h9oZt5hvFfKufS2faYj0+rQ0Knm4XATe:y9wZt5hNfKfpYj0+rQ0Knm4XATe

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks