Analysis
-
max time kernel
146s -
max time network
149s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240221-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
29/03/2024, 21:52
Behavioral task
behavioral1
Sample
2dad1b8a18f96e7bc094241468603f5b_JaffaCakes118
Resource
ubuntu2004-amd64-20240221-en
3 signatures
150 seconds
General
-
Target
2dad1b8a18f96e7bc094241468603f5b_JaffaCakes118
-
Size
115KB
-
MD5
2dad1b8a18f96e7bc094241468603f5b
-
SHA1
eb88b3b5502ddee2840206abbaef33b7df2f7df2
-
SHA256
7222459bd9aef44fcafa1392242925c119e4668b7d43c139b6bc2191bae08afb
-
SHA512
7feddd7caafc1bb579e08a672b83dc336968fcbbf9c8972aada3b0337ff54870cc0a660bac9867dbd5a8589d89c9d7f8b7f1f13db5fb1e261a5643d874c237b5
-
SSDEEP
3072:5hYC2+pvt9Xlf8f6Cbor/KbVXEiKe5Rrm7qOV/V0JKVTNO:bN/Cc7XiKe5Rrm7qOV/V0JKVTNO
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself sshd 1468 2dad1b8a18f96e7bc094241468603f5b_JaffaCakes118 -
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 2dad1b8a18f96e7bc094241468603f5b_JaffaCakes118 -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 2dad1b8a18f96e7bc094241468603f5b_JaffaCakes118