Analysis

  • max time kernel
    140s
  • max time network
    151s
  • platform
    ubuntu-20.04_amd64
  • resource
    ubuntu2004-amd64-20240221-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
  • submitted
    29/03/2024, 21:19

General

  • Target

    2d1d0820d945ef9a446e7da75e1b6595_JaffaCakes118

  • Size

    76KB

  • MD5

    2d1d0820d945ef9a446e7da75e1b6595

  • SHA1

    ea5450bd13f9a47d68760ba2e719320528f0c205

  • SHA256

    71013203bd0db8608ad9931183772f24a497d6c37dc388ebdb4dbdf626852d19

  • SHA512

    83fb5442dcd6c7f06b5ea39e45c86d27a58cf226abb5f2370b6d1ac70ad26779507f98ae7897347d73c6725be3a9c44ad8c6abb9eefca0f516a9bb2a0351ee44

  • SSDEEP

    1536:ehEqac7IrWe6ZKJHBLpyZfR+6t2mLI2VOCjXVfyRk:zqPN7wJHBFyjH2mU2VOCbVfyRk

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/2d1d0820d945ef9a446e7da75e1b6595_JaffaCakes118
    /tmp/2d1d0820d945ef9a446e7da75e1b6595_JaffaCakes118
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:1468

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads