General
- Target b2e2f26cff266438bb1e1a0fa3628365_JaffaCakes118
- Size 14KB
- Sample240616-lxd3jayfna
- SHA256 3ca74735c5377e787250efd0b63218c97bb9ef07cec2e2dbcd6ff0dd30cbab32
Score
8/10
Malware Config
Targets
-
- Target b2e2f26cff266438bb1e1a0fa3628365_JaffaCakes118
- Size 14KB
- SHA256 3ca74735c5377e787250efd0b63218c97bb9ef07cec2e2dbcd6ff0dd30cbab32
Score8/10Adds new SSH keys
Linux special file to hold SSH keys. The threat actor may add new keys for further remote access.
Attempts to change immutable files
Modifies inode attributes on the filesystem to allow changing of immutable files.
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
Enumerates running processes
Discovers information about currently running processes on the system