Analysis
-
max time kernel
0s -
max time network
128s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240226-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
05-05-2024 03:17
Behavioral task
behavioral1
Sample
15bd65121b0ae9cb94df98b5c19204cc_JaffaCakes118
Resource
ubuntu1804-amd64-20240226-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
15bd65121b0ae9cb94df98b5c19204cc_JaffaCakes118
-
Size
54KB
-
MD5
15bd65121b0ae9cb94df98b5c19204cc
-
SHA1
ccf9ed409fefb8ae1c0810c8c4336956ef8775c3
-
SHA256
7a4eac771d2e330ec8c78216d384856813004cfa06100bea123a8a6daa98baba
-
SHA512
4d8ecb2ebf5561b8720bd84faf525d35bdeeb8dfd39516c657c2bc107983a76bbb1e489ba1135848334dcc923ed56d391cc651c0a22b2d8e6707d960b6839b2b
-
SSDEEP
1536:36Ew7hWCbZ6OzptrGP85wXylWTF+Lt+Rc:C1W4Z6OzP4NXylWp+LQK
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
Processes:
15bd65121b0ae9cb94df98b5c19204cc_JaffaCakes118pid process 1577 15bd65121b0ae9cb94df98b5c19204cc_JaffaCakes118 -
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
Processes:
15bd65121b0ae9cb94df98b5c19204cc_JaffaCakes118description ioc process File opened for modification /dev/misc/watchdog 15bd65121b0ae9cb94df98b5c19204cc_JaffaCakes118 File opened for modification /dev/watchdog 15bd65121b0ae9cb94df98b5c19204cc_JaffaCakes118