Overview

overview

10

Static

static

10

7765d556b6...kes118

ubuntu-18.04-amd64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    7765d556b6638bfc1444c07197bda52c_JaffaCakes118
  • Size 98KB
  • Sample240527-bctx5sbe34
  • SHA256 d4907a34f0a7b08bbea847be07e038615cacafbf3b184e4e89ea67ad207f4a3b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gafgytdiscoverylinux

Malware Config

Targets

    • Target
      7765d556b6638bfc1444c07197bda52c_JaffaCakes118
    • Size 98KB
    • SHA256 d4907a34f0a7b08bbea847be07e038615cacafbf3b184e4e89ea67ad207f4a3b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    discovery

    • Contacts a large (23521) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks