Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240226-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    29/03/2024, 16:43

General

  • Target

    2735737c77be06bc3b5dbbe776f6622d_JaffaCakes118

  • Size

    107KB

  • MD5

    2735737c77be06bc3b5dbbe776f6622d

  • SHA1

    25e84ebe73501db34028e169f961fa50c2396afe

  • SHA256

    a5fc6ab694fa27f8fb946de5588ce121f37c7d5a5d9f8844fbfae5b6cf89b86f

  • SHA512

    3635045e7078745ad12e028a8a073867e0435417f92e1ad1b8a752d306c4311b122773f61062c6cdb8361f818a7500f2ad789d4307e548590bb3c49b1cb00a35

  • SSDEEP

    3072:S0f8p7WsaXNQRkR972E7p1kq6hUxXGqFomLuqQEDIBVXFkQ:NmaXN3d2E7p7J7emLuqQEDIBVXFkQ

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/2735737c77be06bc3b5dbbe776f6622d_JaffaCakes118
    /tmp/2735737c77be06bc3b5dbbe776f6622d_JaffaCakes118
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:646

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads