General

  • Target

    JaffaCakes118_f295b210496a25c5a60ba67168cfe339

  • Size

    123KB

  • Sample

    250111-a3cwwaxqgm

  • MD5

    f295b210496a25c5a60ba67168cfe339

  • SHA1

    fa8774f3c97459c59a4120c5e579f2990e4394e9

  • SHA256

    a02d4bd3a6faf4fd4335293f2d33f445a96bb6b2c9b6c7d23026fc6f4c44ecdd

  • SHA512

    5ddd675a763f847c65e8abb44d5e89d8fb7ad581059353a2db48db60f85ec14c7482254d946806863dcb560c4b8db6cb72b7e3fee03ed80dbd57e7ea8a31c647

  • SSDEEP

    1536:/cHeT5CAms/Y8Zm3lKYA43gMJwSkJ8Epro1DzUh8rmW+IFB1Df11hR/:/cCLqAmgMJM8EhaDw8rmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

23.88.113.7:606

Targets

    • Target

      JaffaCakes118_f295b210496a25c5a60ba67168cfe339

    • Size

      123KB

    • MD5

      f295b210496a25c5a60ba67168cfe339

    • SHA1

      fa8774f3c97459c59a4120c5e579f2990e4394e9

    • SHA256

      a02d4bd3a6faf4fd4335293f2d33f445a96bb6b2c9b6c7d23026fc6f4c44ecdd

    • SHA512

      5ddd675a763f847c65e8abb44d5e89d8fb7ad581059353a2db48db60f85ec14c7482254d946806863dcb560c4b8db6cb72b7e3fee03ed80dbd57e7ea8a31c647

    • SSDEEP

      1536:/cHeT5CAms/Y8Zm3lKYA43gMJwSkJ8Epro1DzUh8rmW+IFB1Df11hR/:/cCLqAmgMJM8EhaDw8rmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks