Analysis
-
max time kernel
0s -
max time network
128s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240226-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
29/03/2024, 13:41
Behavioral task
behavioral1
Sample
23748142dab6731fa3d02f70fb3a9a6b_JaffaCakes118
Resource
ubuntu1804-amd64-20240226-en
2 signatures
150 seconds
General
-
Target
23748142dab6731fa3d02f70fb3a9a6b_JaffaCakes118
-
Size
891KB
-
MD5
23748142dab6731fa3d02f70fb3a9a6b
-
SHA1
7d55d204953ec6eff022e9ed66fc49669d88faef
-
SHA256
0256247246182c86178e9ae2fb9781db90a2f98b836b4d370374d33b8af091c1
-
SHA512
db30e05a308c5d7c176a1da31b3dc443593a5649b12f2e406dbb364ab5262d8f7d952e1817bb91771a2d5e675a8e2214ac132fc974d84b3f1b3d383e3fcb74b5
-
SSDEEP
24576:9yN1QXwX8tdgn6YHbXpVKA8zfeMqow9jxz7cdF0yaYGvwUZs:9i6Gwo5UrRW9Nzq9aYG+
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/misc/watchdog 23748142dab6731fa3d02f70fb3a9a6b_JaffaCakes118 File opened for modification /dev/watchdog 23748142dab6731fa3d02f70fb3a9a6b_JaffaCakes118 -
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/self/exe 23748142dab6731fa3d02f70fb3a9a6b_JaffaCakes118