b9a68a25be521058041ce8a6eef5cf63de84765d5373d1a28cc50e4b1c31474f

Analysis

max time kernel
120s
max time network
140s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
28/07/2024, 01:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

048559f2fdcd90461db0d8d66dee6ff1_JaffaCakes118
Size

106KB
MD5

048559f2fdcd90461db0d8d66dee6ff1
SHA1

776ee982348b85c19286038c0248bbd0446348c6
SHA256

b9a68a25be521058041ce8a6eef5cf63de84765d5373d1a28cc50e4b1c31474f
SHA512

c8b39643d4a5214d7a909b938be0f3278b7c6541f675aa70167d4c03530793db0242fd3905b56cc93f0ef16e2c3d7f18a7e40971bfd4a1e7dc19818124aa37c4
SSDEEP

3072:ccnzWqtdwHsxiKw/SE0Oe+MphamRzDtjoKty8wdOM:PIH9Kw/J/MphampDtjoKty8wdOM

Score

7^/10

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
2458	048559f2fdcd90461db0d8d66dee6ff1_JaffaCakes118

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	048559f2fdcd90461db0d8d66dee6ff1_JaffaCakes118

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	81fe686p7	2458	048559f2fdcd90461db0d8d66dee6ff1_JaffaCakes118

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	048559f2fdcd90461db0d8d66dee6ff1_JaffaCakes118

/tmp/048559f2fdcd90461db0d8d66dee6ff1_JaffaCakes118
/tmp/048559f2fdcd90461db0d8d66dee6ff1_JaffaCakes118
1⤵
- Deletes itself
- Reads system routing table
- Changes its process name
- Reads system network configuration
PID:2458

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads