Analysis
-
max time kernel
145s -
max time network
135s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240226-en -
resource tags
-
submitted
15/04/2024, 04:15
General
-
Target
f04939e50d111f371aa9823e54e07e13_JaffaCakes118
-
Size
113KB
-
MD5
f04939e50d111f371aa9823e54e07e13
-
SHA1
4643f9de6e6ca2aa61d35bed63fceca52428f1f7
-
SHA256
6ad1f1b4427d6317c599e614d0554e940ca617187ef0d50dc2ae65ee1349b3cc
-
SHA512
bba61a1ad879abda24798c76f4e4ceffa79fa13dc46aa4c6cc161d96b86c9adc7b2e3d8c70551abdb7cf7dfb57f965d3fc67719bd4174f2aa88cba005c2ad42d
-
SSDEEP
3072:kiry859a2ADJf9wHYqbgFFo8+HeAp+TRCm7FnVqfJXFWbNb:T9a2aLqkrM0sm7FnVqfJXFWbNb
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/f04939e50d111f371aa9823e54e07e13_JaffaCakes118/tmp/f04939e50d111f371aa9823e54e07e13_JaffaCakes1181⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration