General

  • Target

    JaffaCakes118_df2d834f32ba785b2e4f92b93bf0aa92

  • Size

    152KB

  • Sample

    250110-jy491axqev

  • MD5

    df2d834f32ba785b2e4f92b93bf0aa92

  • SHA1

    21ebc1a5dfbfbec01f1f01aa3a71aa7789b06a5c

  • SHA256

    b5f176e240d457b3fd1e08466f92b9c137858355008a036c98da517b9cb99140

  • SHA512

    feb044d9b576048ca59d8a0fded53cd8003534213fe4081cd12edd3c8f37b49cdb591b3b78b6214024a215de37295f468e785019e71bf55135c463d1a85044cc

  • SSDEEP

    3072:tdntU2haO5H1XacBoGmh9H5/5hDiGRvEM/9f9T637m5wTsL/Qpyn:ntVhaO5H1qEc9Hx5hDiGRcM/9l+7m5wS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

107.189.10.234:4258

Targets

    • Target

      JaffaCakes118_df2d834f32ba785b2e4f92b93bf0aa92

    • Size

      152KB

    • MD5

      df2d834f32ba785b2e4f92b93bf0aa92

    • SHA1

      21ebc1a5dfbfbec01f1f01aa3a71aa7789b06a5c

    • SHA256

      b5f176e240d457b3fd1e08466f92b9c137858355008a036c98da517b9cb99140

    • SHA512

      feb044d9b576048ca59d8a0fded53cd8003534213fe4081cd12edd3c8f37b49cdb591b3b78b6214024a215de37295f468e785019e71bf55135c463d1a85044cc

    • SSDEEP

      3072:tdntU2haO5H1XacBoGmh9H5/5hDiGRvEM/9f9T637m5wTsL/Qpyn:ntVhaO5H1qEc9Hx5hDiGRcM/9l+7m5wS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks