c1c395dadb2f9d96ff6aa10d36cf64ec6c432a7f68ad9c50fb3ab4cb99eb78be

Analysis

max time network
124s
platform
debian-9_armhf
resource
debian9-armhf-20240418-en
resource tags

arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
14-05-2024 08:43

Target

40e52b7bde1eeaa171cbaa04ad814bff_JaffaCakes118
Size

28KB
MD5

40e52b7bde1eeaa171cbaa04ad814bff
SHA1

983553ee2b3ea8c1716121bab4afe300fb06a786
SHA256

c1c395dadb2f9d96ff6aa10d36cf64ec6c432a7f68ad9c50fb3ab4cb99eb78be
SHA512

b5ecb9ba9c3360c60c6d3b31ea8bde67510e2457256d1c81e34d97f96851e5b7264433a56d5129a0f72bfb212f97051aaebf5c49fafd7c9fc9da48a842cc261e
SSDEEP

384:p7pQQwQHDf6jlpTWg3vMGQiKMvU/4Qdre21jT58vKpG2Y0orcfKLUv0KZnNEVdeu:p7JVFNcD8FLcIwgiYq0xFB85

Score

6^/10

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

Processes:

flow	ioc
11	bitbucket.org
12	bitbucket.org

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact