Analysis
-
max time kernel
145s -
max time network
148s -
platform
debian-9_armhf -
resource
debian9-armhf-20240226-en -
resource tags
-
submitted
27-04-2024 22:27
General
-
Target
03c3e21a06f67b8ff36b12eed1d89cf3_JaffaCakes118
-
Size
127KB
-
MD5
03c3e21a06f67b8ff36b12eed1d89cf3
-
SHA1
e4a42f794fcb3e763ffab3d91de4d50435aaf96f
-
SHA256
fb193c395ef01cbe155e41cf5fdf4397736272e64fd3cc9a28f35a826255c3e3
-
SHA512
267fb39551b4b086733451f2f5d9791c1a68906a638afe6e69cd0ae350f3cfb90f17e8865500503434ee015a0099669a30de94af490b83f6160b44b913ceac8f
-
SSDEEP
3072:tbv8jhuBPx+hc9TRk5HYTcbHTjEaHZse6XXMWlmKTaf0M05jGHhU+3xEYovPLF+k:tlvHMW0KTaschU+3mozGmpQAqcq3r
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Changes its process name 1 IoCs
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/03c3e21a06f67b8ff36b12eed1d89cf3_JaffaCakes118/tmp/03c3e21a06f67b8ff36b12eed1d89cf3_JaffaCakes1181⤵
- Reads system routing table
- Changes its process name
- Reads system network configuration