General

  • Target

    JaffaCakes118_390683e05e1e65a89a6a237717d91cb0

  • Size

    118KB

  • Sample

    250106-zanv4sypgl

  • MD5

    390683e05e1e65a89a6a237717d91cb0

  • SHA1

    3dce6b2d5ed26ad5e6484f6416b361700126095a

  • SHA256

    6905f5292059d375919468521298156db1da57332356e71fa152c8ccbd9fbcfd

  • SHA512

    9ed8d2e9ea3c18594e96c4398410d8853addbffe70fcbcc000e3c64e9498da36630478e1e7cd53b66145d0c14753712b5626c9055ae39705d0a0beaf4dd50891

  • SSDEEP

    3072:WkYP4WY4noL8xOa4/F3OfDIMF8+mTQOY5NX3cn:lYP4WY4gIOakOfDe+mTQOY5R3cn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

23.88.113.7:606

Targets

    • Target

      JaffaCakes118_390683e05e1e65a89a6a237717d91cb0

    • Size

      118KB

    • MD5

      390683e05e1e65a89a6a237717d91cb0

    • SHA1

      3dce6b2d5ed26ad5e6484f6416b361700126095a

    • SHA256

      6905f5292059d375919468521298156db1da57332356e71fa152c8ccbd9fbcfd

    • SHA512

      9ed8d2e9ea3c18594e96c4398410d8853addbffe70fcbcc000e3c64e9498da36630478e1e7cd53b66145d0c14753712b5626c9055ae39705d0a0beaf4dd50891

    • SSDEEP

      3072:WkYP4WY4noL8xOa4/F3OfDIMF8+mTQOY5NX3cn:lYP4WY4gIOakOfDe+mTQOY5R3cn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks