General

  • Target

    JaffaCakes118_9ec0f1659a67eb751c981860e31903db

  • Size

    123KB

  • Sample

    250108-pdxbjs1qek

  • MD5

    9ec0f1659a67eb751c981860e31903db

  • SHA1

    2fb21f1a8bf20f2a5bcb7eb07926658c75b21b05

  • SHA256

    ad0c93d57e36644098fcf220fef0098a640e113578ab19fab7a9883b8c113295

  • SHA512

    1660a17c3a0e7a05673f979df12cb1897d489461e830bb663128c7927924cd236c6c1ffe9a7d1123dc896a0d171e92b8f4e001d7bbfe75c98d392e0244251006

  • SSDEEP

    1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBexEdWfRZrmW+IFj:Ted0W0MZQHZd6RZrmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.148.120.171:666

Targets

    • Target

      JaffaCakes118_9ec0f1659a67eb751c981860e31903db

    • Size

      123KB

    • MD5

      9ec0f1659a67eb751c981860e31903db

    • SHA1

      2fb21f1a8bf20f2a5bcb7eb07926658c75b21b05

    • SHA256

      ad0c93d57e36644098fcf220fef0098a640e113578ab19fab7a9883b8c113295

    • SHA512

      1660a17c3a0e7a05673f979df12cb1897d489461e830bb663128c7927924cd236c6c1ffe9a7d1123dc896a0d171e92b8f4e001d7bbfe75c98d392e0244251006

    • SSDEEP

      1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBexEdWfRZrmW+IFj:Ted0W0MZQHZd6RZrmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks