Analysis

  • max time kernel
    0s
  • max time network
    128s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240226-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    29/03/2024, 13:41

General

  • Target

    23748142dab6731fa3d02f70fb3a9a6b_JaffaCakes118

  • Size

    891KB

  • MD5

    23748142dab6731fa3d02f70fb3a9a6b

  • SHA1

    7d55d204953ec6eff022e9ed66fc49669d88faef

  • SHA256

    0256247246182c86178e9ae2fb9781db90a2f98b836b4d370374d33b8af091c1

  • SHA512

    db30e05a308c5d7c176a1da31b3dc443593a5649b12f2e406dbb364ab5262d8f7d952e1817bb91771a2d5e675a8e2214ac132fc974d84b3f1b3d383e3fcb74b5

  • SSDEEP

    24576:9yN1QXwX8tdgn6YHbXpVKA8zfeMqow9jxz7cdF0yaYGvwUZs:9i6Gwo5UrRW9Nzq9aYG+

Score
7/10

Malware Config

Signatures

  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/23748142dab6731fa3d02f70fb3a9a6b_JaffaCakes118
    /tmp/23748142dab6731fa3d02f70fb3a9a6b_JaffaCakes118
    1⤵
    • Modifies Watchdog functionality
    • Reads runtime system information
    PID:1561

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads