240fe01d9fcce5aae311e906b8311a1975f8c1431b83618f3d11aeaff10aede3

Analysis

max time kernel
149s
max time network
134s
platform
ubuntu-20.04_amd64
resource
ubuntu2004-amd64-20240221-en
resource tags

arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
submitted
28-03-2024 21:29

Target

108027ef0a54f0d1c4d71ceb8d49d8d5_JaffaCakes118
Size

13.7MB
MD5

108027ef0a54f0d1c4d71ceb8d49d8d5
SHA1

555332faa336ed0e06e9b04d998cd53c5e192f1f
SHA256

240fe01d9fcce5aae311e906b8311a1975f8c1431b83618f3d11aeaff10aede3
SHA512

1d5f7218cd4d7aeea46dd533985d52c8a4f34d64ef0f52dfc66113e58f2591a387d6b56547ffd3a76e0ae7493fbc4517e3b13dc52b6ed3edf69d9e2adb3da5f9
SSDEEP

196608:R4BK7xPSNFn7ArWghPVM07iPuO4Cqh8zJQX8x:RicqNR7107RO4Cqh8zJQXS

Score

3^/10

Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.

Processes:

108027ef0a54f0d1c4d71ceb8d49d8d5_JaffaCakes118

description ioc process

File opened for modification /tmp/config.txt 108027ef0a54f0d1c4d71ceb8d49d8d5_JaffaCakes118

description	ioc	process
File opened for modification	/tmp/config.txt	108027ef0a54f0d1c4d71ceb8d49d8d5_JaffaCakes118

/tmp/108027ef0a54f0d1c4d71ceb8d49d8d5_JaffaCakes118
/tmp/108027ef0a54f0d1c4d71ceb8d49d8d5_JaffaCakes118
1⤵
- Writes file to tmp directory
PID:1460