General

  • Target

    JaffaCakes118_b6d7f1dd32701efe6c6fa1dada1c9829

  • Size

    91KB

  • Sample

    250109-bsbfqsvjhj

  • MD5

    b6d7f1dd32701efe6c6fa1dada1c9829

  • SHA1

    75623eb9a4d1d46148fac30d148cbf5a3b61c7a1

  • SHA256

    d1b9aa74142ebc02fcfa0e46c88e1e094aed9e6e55650306aabe7c8c75b50ed6

  • SHA512

    44ab10fb524e30e77518428cf355ca50f119956555c2adb36e8ae844cdaa3d5f540edc16ac71c97222278a2904d05207ff9078a7fe66a697c4ad1c2d5b37bbc2

  • SSDEEP

    1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v33phauH/SPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGd3phaE/AVog99um2XFY

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

107.189.10.234:4258

Targets

    • Target

      JaffaCakes118_b6d7f1dd32701efe6c6fa1dada1c9829

    • Size

      91KB

    • MD5

      b6d7f1dd32701efe6c6fa1dada1c9829

    • SHA1

      75623eb9a4d1d46148fac30d148cbf5a3b61c7a1

    • SHA256

      d1b9aa74142ebc02fcfa0e46c88e1e094aed9e6e55650306aabe7c8c75b50ed6

    • SHA512

      44ab10fb524e30e77518428cf355ca50f119956555c2adb36e8ae844cdaa3d5f540edc16ac71c97222278a2904d05207ff9078a7fe66a697c4ad1c2d5b37bbc2

    • SSDEEP

      1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v33phauH/SPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGd3phaE/AVog99um2XFY

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks