Analysis
-
max time kernel
150s -
max time network
158s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem -
submitted
30-07-2024 14:48
Behavioral task
behavioral1
Sample
75579d16ba42483a983507f500fd98c2_JaffaCakes118
Resource
debian12-armhf-20240221-en
debian-12-armhf
2 signatures
150 seconds
General
-
Target
75579d16ba42483a983507f500fd98c2_JaffaCakes118
-
Size
115KB
-
MD5
75579d16ba42483a983507f500fd98c2
-
SHA1
5d16f1c948f7630a86a170e225f0194d8d45af65
-
SHA256
f1b0ad3518c8567a81ffeefdfad0afcf92e4194de3e4389cc08810083440a7a7
-
SHA512
48ef1bc836938d68f229b2078e9d629a3d1965dc8cb8614fb4a4328641fb6de5f2ee8559c91639c914ab4dad555a2f8cf60e7d17f3086ffa5ed9a30b7df49cbb
-
SSDEEP
3072:LfyWO8aUqCuddpkfT6T3VD0qXpgpmy8QZ4Ou3bi:GWLazBk76T3VDnXSmy8QZ4T3bi
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 75579d16ba42483a983507f500fd98c2_JaffaCakes118 -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 75579d16ba42483a983507f500fd98c2_JaffaCakes118