Analysis
- max time kernel
145s - max time network
134s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20240508-en - resource tags
- submitted
10/05/2024, 19:10
General
- Target 3098e46d569e0d762e55a9c1f7918fea_JaffaCakes118
- Size 101KB
- Sample240510-xvbeeacf5x
- SHA256 9c5ba8c7b08bc06defa8332e09112d8d736a30dd4a975b17fbb63dd298d094a0
Score
7/10
Malware Config
Signatures
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
- Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
- Changes its process name 1 IoCs
- Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/3098e46d569e0d762e55a9c1f7918fea_JaffaCakes118/tmp/3098e46d569e0d762e55a9c1f7918fea_JaffaCakes1181⤵
- Modifies Watchdog functionality
- Reads system routing table
- Changes its process name
- Reads system network configuration