General

  • Target

    JaffaCakes118_706c763223231cc70af13ea7c4a85216

  • Size

    123KB

  • Sample

    250107-v79rma1mhs

  • MD5

    706c763223231cc70af13ea7c4a85216

  • SHA1

    a3c149024c1196bd76af10b8e4d9d8de003b106d

  • SHA256

    361c4625484ec620cd72b42f523cc9e96ac9826b3ee12f3bd00148f50a0852b1

  • SHA512

    67e0ac1fa1db71a78e1f8d6733bf475355d12da078f2933aedc51b85429b2985a1bb6edefbf61ec665f9fea34bd348da4db43656b4f09483bc97150b696a8c13

  • SSDEEP

    1536:g7je1TYGq+f+A02rKXzeve1eTe8p2rKXIeum9Y0GAzQj1l72HBerERLWfRZrmW+i:/a1UW0MZQH/B6RZrmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

107.172.141.135:1194

Targets

    • Target

      JaffaCakes118_706c763223231cc70af13ea7c4a85216

    • Size

      123KB

    • MD5

      706c763223231cc70af13ea7c4a85216

    • SHA1

      a3c149024c1196bd76af10b8e4d9d8de003b106d

    • SHA256

      361c4625484ec620cd72b42f523cc9e96ac9826b3ee12f3bd00148f50a0852b1

    • SHA512

      67e0ac1fa1db71a78e1f8d6733bf475355d12da078f2933aedc51b85429b2985a1bb6edefbf61ec665f9fea34bd348da4db43656b4f09483bc97150b696a8c13

    • SSDEEP

      1536:g7je1TYGq+f+A02rKXzeve1eTe8p2rKXIeum9Y0GAzQj1l72HBerERLWfRZrmW+i:/a1UW0MZQH/B6RZrmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks