General

  • Target

    JaffaCakes118_ba30ddc46f8e578d5414e5ed37f4037a

  • Size

    83KB

  • Sample

    250109-dehn1axqan

  • MD5

    ba30ddc46f8e578d5414e5ed37f4037a

  • SHA1

    30471ab1f2691b8a1a5ff34dd6fcc0cd18077ddb

  • SHA256

    b4a39c7ca505a9972d6f3f6090674657684d1922fe7af46d24d37493500cc4c6

  • SHA512

    009566b89c25facab1794755d82a6cd496a574e65692f080d996378fb7774d61360a76c2436ca0e35329d522981a6c497d47be0cfaf4b064eefd9455caa5897d

  • SSDEEP

    1536:yD5b1hE4t3J6lreu5r4hWj8LgGDloRmF+wVOz+sXcfW7k:wb1hE4pJ6liuq0YcGoRmEwVOz+ucfW7k

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

23.88.113.7:606

Targets

    • Target

      JaffaCakes118_ba30ddc46f8e578d5414e5ed37f4037a

    • Size

      83KB

    • MD5

      ba30ddc46f8e578d5414e5ed37f4037a

    • SHA1

      30471ab1f2691b8a1a5ff34dd6fcc0cd18077ddb

    • SHA256

      b4a39c7ca505a9972d6f3f6090674657684d1922fe7af46d24d37493500cc4c6

    • SHA512

      009566b89c25facab1794755d82a6cd496a574e65692f080d996378fb7774d61360a76c2436ca0e35329d522981a6c497d47be0cfaf4b064eefd9455caa5897d

    • SSDEEP

      1536:yD5b1hE4t3J6lreu5r4hWj8LgGDloRmF+wVOz+sXcfW7k:wb1hE4pJ6liuq0YcGoRmEwVOz+ucfW7k

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks