Analysis
-
max time kernel
140s -
max time network
148s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240418-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240418-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
05/05/2024, 02:50
Static task
static1
Behavioral task
behavioral1
Sample
15a545f254e324a255b495c5b5425420_JaffaCakes118
Resource
ubuntu1804-amd64-20240418-en
2 signatures
150 seconds
General
-
Target
15a545f254e324a255b495c5b5425420_JaffaCakes118
-
Size
77KB
-
MD5
15a545f254e324a255b495c5b5425420
-
SHA1
9fab79f2a0b0f6cab425a131dac3417e8dc6da84
-
SHA256
d89604d36485cc4d951f65d8c4da6d1eafff90d580b4a500f2755252568cecd5
-
SHA512
a1e21e782c9d3375e0fb19b0b2525a2359de2c192d03d1b345c17bd7da3463927c3e0bd2d4293f196ae9a66dcc60b1039f9a00eeb2f01c3c5bbd5879f270369e
-
SSDEEP
1536:R71kpTcE1iTe9DlBj+B4O3y1yw+s/+iKHp7amA+2WOm6coZPmj:hocE1FDfG4yy1CsmiM7am/2WOm1oZPmj
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 15a545f254e324a255b495c5b5425420_JaffaCakes118 -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 15a545f254e324a255b495c5b5425420_JaffaCakes118