Overview

overview

10

Static

static

10

096613f49f...kes118

ubuntu-20.04-amd64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    096613f49f95b61e65173b25f58b4aa6_JaffaCakes118

  • Size

    119KB

  • Sample

    240430-j1e3wsgd2y

  • MD5

    096613f49f95b61e65173b25f58b4aa6

  • SHA1

    9b549ffc8d5c3202d7610367f28efbc4348b4667

  • SHA256

    4525c719ae32de9b389b445162e6cf55fe109e8174f106d6ea03d9cae30cd218

  • SHA512

    514ec2f7e4d947e819ab59b158bb5c0af3d2417fe1fe9baafa2a976b769d40248ef4ba66dc95a36b479848e4b687de2c4328ba614bcfd464b9557299c509ecd1

  • SSDEEP

    3072:y15qz+kA1g7Rwtfn6/YOsniwDLbABdtmNl1VhbaRklkNb:y1l1TR6/YziQitmNl1VhbaRklkNb

Score
10/10
gafgytdiscoverylinux

Malware Config

Targets

    • Target

      096613f49f95b61e65173b25f58b4aa6_JaffaCakes118

    • Size

      119KB

    • MD5

      096613f49f95b61e65173b25f58b4aa6

    • SHA1

      9b549ffc8d5c3202d7610367f28efbc4348b4667

    • SHA256

      4525c719ae32de9b389b445162e6cf55fe109e8174f106d6ea03d9cae30cd218

    • SHA512

      514ec2f7e4d947e819ab59b158bb5c0af3d2417fe1fe9baafa2a976b769d40248ef4ba66dc95a36b479848e4b687de2c4328ba614bcfd464b9557299c509ecd1

    • SSDEEP

      3072:y15qz+kA1g7Rwtfn6/YOsniwDLbABdtmNl1VhbaRklkNb:y1l1TR6/YziQitmNl1VhbaRklkNb

    Score
    9/10
    discovery

    • Contacts a large (24171) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks