Analysis

  • max time kernel
    144s
  • max time network
    152s
  • platform
    ubuntu-20.04_amd64
  • resource
    ubuntu2004-amd64-20240508-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2004-amd64-20240508-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
  • submitted
    26-05-2024 23:13

General

  • Target

    77202decb78fb5144ea91c147a5d36bf_JaffaCakes118

  • Size

    88KB

  • MD5

    77202decb78fb5144ea91c147a5d36bf

  • SHA1

    d1f7bf72bb70ee378d506556fa31355667c1026b

  • SHA256

    676a8eea033362f081bf2657f40eb2559d0f36ced72cdc5bf42e06deeaeb3ad2

  • SHA512

    3074ebacd6a6a7c527ed1edbb2411cf16b5852d58d341494e1baf2c0185cf5c3d7bb3c04e758598e1cf568a640726280fda4c4292ad5339c8dfb843eff9a07f8

  • SSDEEP

    1536:IYdUERs7U89gO9NnjYbKjYDI3YfDene889V9B4LaGPtmAIgSuHtm77XkcaP5VgYw:ddu7U8939NnjYOY0YfDee86LB42eIghM

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Changes its process name 1 IoCs
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/77202decb78fb5144ea91c147a5d36bf_JaffaCakes118
    /tmp/77202decb78fb5144ea91c147a5d36bf_JaffaCakes118
    1⤵
    • Reads system routing table
    • Changes its process name
    • Reads system network configuration
    PID:1392

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads