General

  • Target

    JaffaCakes118_518b4d45990ffc4faa4af952b29dea45

  • Size

    118KB

  • Sample

    250107-gqfwbszjdr

  • MD5

    518b4d45990ffc4faa4af952b29dea45

  • SHA1

    ba7bfd51575168a98ebf9f13215b1b313d7e9b78

  • SHA256

    79c8dab2be2616dce4ea45a6a4a16665e7696b415873862c02fc391f8155229a

  • SHA512

    dbb6bc32acce33dec3e45fb326554b1347e372c059cc7fc40568371f6e0bfbdd3ee3daf0adf1248cd47caa0546c3d3bac1b335c3182061728bea97dbff66728e

  • SSDEEP

    3072:ekYPUfsgnsb0J2ag/VfNkDN0dG+mTQOY5NX3cn:9YPUfsgEo2a0NkDP+mTQOY5R3cn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

107.189.13.139:6969

Targets

    • Target

      JaffaCakes118_518b4d45990ffc4faa4af952b29dea45

    • Size

      118KB

    • MD5

      518b4d45990ffc4faa4af952b29dea45

    • SHA1

      ba7bfd51575168a98ebf9f13215b1b313d7e9b78

    • SHA256

      79c8dab2be2616dce4ea45a6a4a16665e7696b415873862c02fc391f8155229a

    • SHA512

      dbb6bc32acce33dec3e45fb326554b1347e372c059cc7fc40568371f6e0bfbdd3ee3daf0adf1248cd47caa0546c3d3bac1b335c3182061728bea97dbff66728e

    • SSDEEP

      3072:ekYPUfsgnsb0J2ag/VfNkDN0dG+mTQOY5NX3cn:9YPUfsgEo2a0NkDP+mTQOY5R3cn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks