General

  • Target

    JaffaCakes118_620ce9d3f5f3de52d9bd3cd27d88a70f

  • Size

    123KB

  • Sample

    250107-pbtsmssmck

  • MD5

    620ce9d3f5f3de52d9bd3cd27d88a70f

  • SHA1

    edb4a69e84d9816ab7012e706364fb1d92f8b6af

  • SHA256

    4d252c9368de64e54747a60573f5dc2ebfce2d756bb204368635209f08c8c712

  • SHA512

    2923ed4394034d4a2ba6b1c99bbebe14678335657c24af59b4da24559c9c4f113232cd43ad6673199b107bfdc45d46c2e759ab873beb3c393f283f13b2414b52

  • SSDEEP

    1536:47je1TwGq+f+AM2rK/jeve9eLe8B2rK/4eBmq0GAzQj1l72HBe+EJWfRZrmW+IFj:3ClkB0MZQHQJ6RZrmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

23.88.113.7:606

Targets

    • Target

      JaffaCakes118_620ce9d3f5f3de52d9bd3cd27d88a70f

    • Size

      123KB

    • MD5

      620ce9d3f5f3de52d9bd3cd27d88a70f

    • SHA1

      edb4a69e84d9816ab7012e706364fb1d92f8b6af

    • SHA256

      4d252c9368de64e54747a60573f5dc2ebfce2d756bb204368635209f08c8c712

    • SHA512

      2923ed4394034d4a2ba6b1c99bbebe14678335657c24af59b4da24559c9c4f113232cd43ad6673199b107bfdc45d46c2e759ab873beb3c393f283f13b2414b52

    • SSDEEP

      1536:47je1TwGq+f+AM2rK/jeve9eLe8B2rK/4eBmq0GAzQj1l72HBe+EJWfRZrmW+IFj:3ClkB0MZQHQJ6RZrmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks