Analysis Overview
score
10/10
SHA256
6d4de75278dda9ac236b39df59e34fe339caeae7aa9bf4d047ed4da6e05c3216
Threat Level: Known bad
The file 31898eecc00abb26be949765e71e574e_JaffaCakes118 was found to be: Known bad.
Malicious Activity Summary
Mirai family
Loads a kernel module
Writes file to tmp directory
MITRE ATT&CK
N/A
Analysis: static1
Detonation Overview
Reported
2024-07-09 18:44
Signatures
Mirai family
Analysis: behavioral1
Detonation Overview
Submitted
2024-07-09 18:44
Reported
2024-07-09 19:49
Platform
ubuntu2404-amd64-20240523-en
Max time kernel
142s
Max time network
144s
Command Line
[/tmp/31898eecc00abb26be949765e71e574e_JaffaCakes118]
Signatures
Loads a kernel module
| Description | Indicator | Process | Target |
| N/A | N/A | /tmp/31898eecc00abb26be949765e71e574e_JaffaCakes118 | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Writes file to tmp directory
| Description | Indicator | Process | Target |
| File opened for modification | /tmp/1wrv336567pvoiwcs127f14dis8vbfa1 | /tmp/31898eecc00abb26be949765e71e574e_JaffaCakes118 | N/A |
Processes
/tmp/31898eecc00abb26be949765e71e574e_JaffaCakes118
[/tmp/31898eecc00abb26be949765e71e574e_JaffaCakes118]
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
| US | 8.8.8.8:53 | smellyoulater.onthewifi.com | udp |
Files
N/A