Overview

overview

10

Static

static

10

JaffaCakes...22ae91

ubuntu-24.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_929812dc36ee73fef59c2d823622ae91

  • Size

    72KB

  • Sample

    250108-h4nzjasjbj

  • MD5

    929812dc36ee73fef59c2d823622ae91

  • SHA1

    1b1eb917dfefb6b13b28ed564cccecf512d8dc8f

  • SHA256

    ea3b74c9613a90f0402de413c92dc96792c17de73883d777677a7888279883ee

  • SHA512

    c0db70ee15850dbc4ffee91391f492f4f883f55d5c6ededbb833ea01bb3c5b269323f78b62ac66038ae29a1c8aecf28d64e96a7d67bba6209a734ad417ad05a9

  • SSDEEP

    1536:nm+c5osQWiKLoxKFn6pD+OTxzMnMmLI2VOCjXUfJRk:45omr0xKFn6J+OIMmU2VOCbUfJRk

Score
10/10
gafgytlinuxrootkit

Malware Config

Extracted

Family

gafgyt

C2

85.237.217.174:839

Targets

    • Target

      JaffaCakes118_929812dc36ee73fef59c2d823622ae91

    • Size

      72KB

    • MD5

      929812dc36ee73fef59c2d823622ae91

    • SHA1

      1b1eb917dfefb6b13b28ed564cccecf512d8dc8f

    • SHA256

      ea3b74c9613a90f0402de413c92dc96792c17de73883d777677a7888279883ee

    • SHA512

      c0db70ee15850dbc4ffee91391f492f4f883f55d5c6ededbb833ea01bb3c5b269323f78b62ac66038ae29a1c8aecf28d64e96a7d67bba6209a734ad417ad05a9

    • SSDEEP

      1536:nm+c5osQWiKLoxKFn6pD+OTxzMnMmLI2VOCjXUfJRk:45omr0xKFn6J+OIMmU2VOCbUfJRk

    Score
    7/10
    rootkit

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit
    behavioral1

MITRE ATT&CK Matrix

Tasks