General

  • Target

    JaffaCakes118_d803bbf361ed4a8ee5550f4b3232ae04

  • Size

    83KB

  • Sample

    250110-cgmkaszqhr

  • MD5

    d803bbf361ed4a8ee5550f4b3232ae04

  • SHA1

    b77374a5da17d1610af82abf80c0ec9423401525

  • SHA256

    e31ab1eaecd6a41c0e7288aa8d3a353ec5386447a05adf480dc63cd9dbe8ed64

  • SHA512

    c31978e76deef2f83cf0440894231ff4555b99671d411881626739b996fde5f5f1141a003194b47ffcab4c33636df06818aacc43caa104bc52679242680927b7

  • SSDEEP

    1536:UB7crF7FePF5tZuEqdPUq0aJb9sqx3CjrM3X9uWIr8UmoIYuOVje+ZNne:URQFet5O7dPr0oSwyjr4X9uDnmrYuOVA

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

85.237.217.174:839

Targets

    • Target

      JaffaCakes118_d803bbf361ed4a8ee5550f4b3232ae04

    • Size

      83KB

    • MD5

      d803bbf361ed4a8ee5550f4b3232ae04

    • SHA1

      b77374a5da17d1610af82abf80c0ec9423401525

    • SHA256

      e31ab1eaecd6a41c0e7288aa8d3a353ec5386447a05adf480dc63cd9dbe8ed64

    • SHA512

      c31978e76deef2f83cf0440894231ff4555b99671d411881626739b996fde5f5f1141a003194b47ffcab4c33636df06818aacc43caa104bc52679242680927b7

    • SSDEEP

      1536:UB7crF7FePF5tZuEqdPUq0aJb9sqx3CjrM3X9uWIr8UmoIYuOVje+ZNne:URQFet5O7dPr0oSwyjr4X9uDnmrYuOVA

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks