Analysis
-
max time kernel
149s -
max time network
128s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20240729-en -
resource tags
-
submitted
28/07/2024, 01:37
General
-
Target
050f2541b0ff97734b066f33be89f53d_JaffaCakes118
-
Size
1.3MB
-
MD5
050f2541b0ff97734b066f33be89f53d
-
SHA1
a0ce2fa27c8ec790e62bf926560fe8c10956b737
-
SHA256
cb338967d877dff6129806568b7e201bba2b45da24943f1d5686d6b200670786
-
SHA512
8b78e89dcedb1fa9e505e94084295c8d9872ef02008fc074e9f266272e9243b0936150579d3b652ee1a87e3ecc18b6b34243115bafd1dfc2b9b46073f6f329e3
-
SSDEEP
24576:fAg0g+3YAqKbwt6Mleiv8x7HBruOmjqD0rV8T5KWs2/wgLg6Yvz1VVbBHpusVmMS:og01IAqHtZleikDuOGqYrVy5Kd2/hJYw
Score
4/10
Malware Config
Signatures
-
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
Reads runtime system information 2 IoCs
Reads data from /proc virtual filesystem.
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/050f2541b0ff97734b066f33be89f53d_JaffaCakes118/tmp/050f2541b0ff97734b066f33be89f53d_JaffaCakes1181⤵
- Checks CPU configuration
- Reads system network configuration
- Reads runtime system information
- Writes file to tmp directory