General
- Target b2e2f26cff266438bb1e1a0fa3628365_JaffaCakes118
- Size 14KB
- Sample240616-lxd3jayfna
- SHA256 3ca74735c5377e787250efd0b63218c97bb9ef07cec2e2dbcd6ff0dd30cbab32
Score
8/10
Malware Config
Targets
-
- Target b2e2f26cff266438bb1e1a0fa3628365_JaffaCakes118
- Size 14KB
- SHA256 3ca74735c5377e787250efd0b63218c97bb9ef07cec2e2dbcd6ff0dd30cbab32
Score8/10-
Adds new SSH keys
Linux special file to hold SSH keys. The threat actor may add new keys for further remote access.
-
Attempts to change immutable files
Modifies inode attributes on the filesystem to allow changing of immutable files.
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system