General

  • Target

    JaffaCakes118_f488681ca7b8b8587e378b12ca6df5c6

  • Size

    92KB

  • Sample

    250111-cw9y5syqgy

  • MD5

    f488681ca7b8b8587e378b12ca6df5c6

  • SHA1

    7cdd9613efb9b8cca6abd30910cefa62af335eb9

  • SHA256

    20659aafbba3e4a455158986bbc6f1167b6494250df7e5b8284dc4d9ca730719

  • SHA512

    f149c70b7cda6c2c99517b57d247a7cb2bbdc979a8e4d9063397768764a6b3ba2087915087e723b04791a7f2271c72887dd390b145ae6fdb79a34c5179f5b564

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3qyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKaifUm/KWOXFE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.148.120.171:666

Targets

    • Target

      JaffaCakes118_f488681ca7b8b8587e378b12ca6df5c6

    • Size

      92KB

    • MD5

      f488681ca7b8b8587e378b12ca6df5c6

    • SHA1

      7cdd9613efb9b8cca6abd30910cefa62af335eb9

    • SHA256

      20659aafbba3e4a455158986bbc6f1167b6494250df7e5b8284dc4d9ca730719

    • SHA512

      f149c70b7cda6c2c99517b57d247a7cb2bbdc979a8e4d9063397768764a6b3ba2087915087e723b04791a7f2271c72887dd390b145ae6fdb79a34c5179f5b564

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3qyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKaifUm/KWOXFE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks