General

  • Target

    JaffaCakes118_f43626a685857250c80037c7e197664e

  • Size

    130KB

  • Sample

    250111-cl4dls1mfk

  • MD5

    f43626a685857250c80037c7e197664e

  • SHA1

    04beec7aa9d70f81ee473e3943e9e0d2b5aeb87a

  • SHA256

    be43b970b155f0c67359c3f334be3de3c89ff8eb7d9b5e029cd3debcabe9c65b

  • SHA512

    849fab71e5286e19cbbdad69f5fd6eda53c0cd11dc321705370295eccb7744c43d2c82b737f5e93f4cd56e99d3dbdf1ea926eacd0c47d1df5be2496365d3e0e0

  • SSDEEP

    3072:Kx0bkx0PU/dVRPDeVRapj4Ju023etJ8add9QzTscdcxtOoct47KcX6GcgqBK:fEDeSmT23etJ8addQ2tWt47KcXJcgqBK

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

176.123.5.44:405

Targets

    • Target

      JaffaCakes118_f43626a685857250c80037c7e197664e

    • Size

      130KB

    • MD5

      f43626a685857250c80037c7e197664e

    • SHA1

      04beec7aa9d70f81ee473e3943e9e0d2b5aeb87a

    • SHA256

      be43b970b155f0c67359c3f334be3de3c89ff8eb7d9b5e029cd3debcabe9c65b

    • SHA512

      849fab71e5286e19cbbdad69f5fd6eda53c0cd11dc321705370295eccb7744c43d2c82b737f5e93f4cd56e99d3dbdf1ea926eacd0c47d1df5be2496365d3e0e0

    • SSDEEP

      3072:Kx0bkx0PU/dVRPDeVRapj4Ju023etJ8add9QzTscdcxtOoct47KcX6GcgqBK:fEDeSmT23etJ8addQ2tWt47KcXJcgqBK

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks