General

  • Target

    JaffaCakes118_972f767dea4fdc0097296e6182cbe39f

  • Size

    98KB

  • Sample

    250108-kxvjvasrfx

  • MD5

    972f767dea4fdc0097296e6182cbe39f

  • SHA1

    475e5b2cbebab4c47d621cb0fc8041d40319d31d

  • SHA256

    084bd7f1ba6d065632cbc7b22681b2a6cc1030c68c8a48897572fba4236cb134

  • SHA512

    d65c67bad5f1a58ac84a7f980169b2e000f9494f4dd27cecca17449462d53ab84a9685c0983bc1005e60ba92c0d807e4b948f77d7c607a951fc6ce2bb5582b56

  • SSDEEP

    3072:1Sl+W6maaWnINPXPxC5iKmZuqQ4DPwXXtse:y6mBWnoPXP9KmZuqQ4DPwXXtse

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

23.88.113.7:606

Targets

    • Target

      JaffaCakes118_972f767dea4fdc0097296e6182cbe39f

    • Size

      98KB

    • MD5

      972f767dea4fdc0097296e6182cbe39f

    • SHA1

      475e5b2cbebab4c47d621cb0fc8041d40319d31d

    • SHA256

      084bd7f1ba6d065632cbc7b22681b2a6cc1030c68c8a48897572fba4236cb134

    • SHA512

      d65c67bad5f1a58ac84a7f980169b2e000f9494f4dd27cecca17449462d53ab84a9685c0983bc1005e60ba92c0d807e4b948f77d7c607a951fc6ce2bb5582b56

    • SSDEEP

      3072:1Sl+W6maaWnINPXPxC5iKmZuqQ4DPwXXtse:y6mBWnoPXP9KmZuqQ4DPwXXtse

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks