General

  • Target

    JaffaCakes118_3a3056817d57228d8d9c0a62a0170bc5

  • Size

    123KB

  • Sample

    250106-zstjbazlar

  • MD5

    3a3056817d57228d8d9c0a62a0170bc5

  • SHA1

    66c7147d7a38895e706c4956cc818191c9d58da4

  • SHA256

    25e7861781d4f89d03ffa0ba79c33753c8c47a057192c97471951dab517d0002

  • SHA512

    6aa7dbb34ef72d772837afe7a9370533e959da44d056cd3d0d954397fb26541ab76f44345b1e7b721ddb0118e070213fc9e5666ef918cf4d40c10f374999d167

  • SSDEEP

    1536:g7je1TYGq+f+A02rKXzeve1eTe8p2rKXIeum9Y0GAzQj1l72HBelERL3iIfrmW+i:/a1UW0MZQHNB3zfrmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

198.46.223.161:36457

Targets

    • Target

      JaffaCakes118_3a3056817d57228d8d9c0a62a0170bc5

    • Size

      123KB

    • MD5

      3a3056817d57228d8d9c0a62a0170bc5

    • SHA1

      66c7147d7a38895e706c4956cc818191c9d58da4

    • SHA256

      25e7861781d4f89d03ffa0ba79c33753c8c47a057192c97471951dab517d0002

    • SHA512

      6aa7dbb34ef72d772837afe7a9370533e959da44d056cd3d0d954397fb26541ab76f44345b1e7b721ddb0118e070213fc9e5666ef918cf4d40c10f374999d167

    • SSDEEP

      1536:g7je1TYGq+f+A02rKXzeve1eTe8p2rKXIeum9Y0GAzQj1l72HBelERL3iIfrmW+i:/a1UW0MZQHNB3zfrmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks