General

  • Target

    JaffaCakes118_35124b5cb7ba0c62e47d523d74954d99

  • Size

    123KB

  • Sample

    250106-xpxepavkbz

  • MD5

    35124b5cb7ba0c62e47d523d74954d99

  • SHA1

    5391fd0dcf11a4da94ab024de0b4a23c55f22e8c

  • SHA256

    860af3040f74e9fe2a8d8e8608a9d0d708c21e121e1cd48dcb3cff795c08a7d4

  • SHA512

    0b42b57901352c7a5beb71295d3fc7b1ccec794911c514173b463168976a5d99950cfb23e96307cdc0880f0d68011e58ab414fd6539f840706639bf21ab7a2c9

  • SSDEEP

    1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBerEdWfRsrmW+IFj:Ted0W0MZQHTd6RsrmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

107.189.13.139:6969

Targets

    • Target

      JaffaCakes118_35124b5cb7ba0c62e47d523d74954d99

    • Size

      123KB

    • MD5

      35124b5cb7ba0c62e47d523d74954d99

    • SHA1

      5391fd0dcf11a4da94ab024de0b4a23c55f22e8c

    • SHA256

      860af3040f74e9fe2a8d8e8608a9d0d708c21e121e1cd48dcb3cff795c08a7d4

    • SHA512

      0b42b57901352c7a5beb71295d3fc7b1ccec794911c514173b463168976a5d99950cfb23e96307cdc0880f0d68011e58ab414fd6539f840706639bf21ab7a2c9

    • SSDEEP

      1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBerEdWfRsrmW+IFj:Ted0W0MZQHTd6RsrmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks