General

  • Target

    JaffaCakes118_1e630ba08fd4337797c332c216ebeaee

  • Size

    158KB

  • Sample

    250706-f8f4da1vhx

  • MD5

    1e630ba08fd4337797c332c216ebeaee

  • SHA1

    9de622000c7890759240292920d910b3854bf2b7

  • SHA256

    1312a73f11515c962d0837aa973496ef71e14b4f1d4cf52a67bee2c7b36c1ffb

  • SHA512

    6177b8faaa69704cdd61f6b0841acb30972d94b6999d147123a007a608042877a4978384e5b371a8df4ee767361bd5a1265449daf74e51b23e14471f8453948b

  • SSDEEP

    3072:+XiiGckhrYt/MblokaLStUjbzavhukP+HS5hadLQfoPw+GPCT+e8myYQ9QFal5:hautUj4P+HS5hadO6w+XamyYQ9QFal5

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.244.25.111:8888

Targets

    • Target

      JaffaCakes118_1e630ba08fd4337797c332c216ebeaee

    • Size

      158KB

    • MD5

      1e630ba08fd4337797c332c216ebeaee

    • SHA1

      9de622000c7890759240292920d910b3854bf2b7

    • SHA256

      1312a73f11515c962d0837aa973496ef71e14b4f1d4cf52a67bee2c7b36c1ffb

    • SHA512

      6177b8faaa69704cdd61f6b0841acb30972d94b6999d147123a007a608042877a4978384e5b371a8df4ee767361bd5a1265449daf74e51b23e14471f8453948b

    • SSDEEP

      3072:+XiiGckhrYt/MblokaLStUjbzavhukP+HS5hadLQfoPw+GPCT+e8myYQ9QFal5:hautUj4P+HS5hadO6w+XamyYQ9QFal5

    Score
    9/10
    • Contacts a large (24018) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v16

Tasks