Analysis

  • max time kernel
    146s
  • max time network
    149s
  • platform
    ubuntu-20.04_amd64
  • resource
    ubuntu2004-amd64-20240221-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
  • submitted
    29/03/2024, 21:52

General

  • Target

    2dad1b8a18f96e7bc094241468603f5b_JaffaCakes118

  • Size

    115KB

  • MD5

    2dad1b8a18f96e7bc094241468603f5b

  • SHA1

    eb88b3b5502ddee2840206abbaef33b7df2f7df2

  • SHA256

    7222459bd9aef44fcafa1392242925c119e4668b7d43c139b6bc2191bae08afb

  • SHA512

    7feddd7caafc1bb579e08a672b83dc336968fcbbf9c8972aada3b0337ff54870cc0a660bac9867dbd5a8589d89c9d7f8b7f1f13db5fb1e261a5643d874c237b5

  • SSDEEP

    3072:5hYC2+pvt9Xlf8f6Cbor/KbVXEiKe5Rrm7qOV/V0JKVTNO:bN/Cc7XiKe5Rrm7qOV/V0JKVTNO

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/2dad1b8a18f96e7bc094241468603f5b_JaffaCakes118
    /tmp/2dad1b8a18f96e7bc094241468603f5b_JaffaCakes118
    1⤵
    • Changes its process name
    • Reads system routing table
    • Reads system network configuration
    PID:1468

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads