Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240729-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    31-07-2024 19:04

General

  • Target

    7d9329eb430d634e690c5399f08d9190_JaffaCakes118

  • Size

    1.2MB

  • MD5

    7d9329eb430d634e690c5399f08d9190

  • SHA1

    4b8d5154083b7d210f441cda45eef7c9669a1b40

  • SHA256

    6717e01ab299d70e16a6d40a0e92483cecf3401c087033b3dd9ae658349b460e

  • SHA512

    43b86e3eff790189b973407a8c7d1527f2bc70f4bbec46a0e7e99c8b6dd5ecf29e28bf575e9c628516af1ecb18e3cc020ca07d167e9a77f41953a1279d259b6d

  • SSDEEP

    24576:e845rlHu6gVJKG75oFpA0VWVX4G2y1q2rJp0:745wRVJKGtSA0VWVoVu9p0

Score
7/10

Malware Config

Signatures

  • Loads a kernel module 43 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

Processes

  • /tmp/7d9329eb430d634e690c5399f08d9190_JaffaCakes118
    /tmp/7d9329eb430d634e690c5399f08d9190_JaffaCakes118
    1⤵
    • Loads a kernel module
    PID:2505

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /etc/init.d/DbSecuritySpt

    Filesize

    64B

    MD5

    6c7e574fe25a3d6df9a93f2c6473b2e9

    SHA1

    50256cdd67ce899df460ed260426729761abab66

    SHA256

    7be1c38fec12d2da7b7319bc2932abfe2d52d7eeae84d8ae95746a65c1c58943

    SHA512

    664bbfb48b9d26b112f2ca303a0c3fe4082dc08ef1fe1b57922282d35c613c5b3573d9e1e34dd2401415b7388da79c1c5eeffa7fa4310ff26d7ce85c74cc20fa

  • /tmp/conf.n

    Filesize

    73B

    MD5

    57f0e7feda2b78ef3ac04ff7ce863ff9

    SHA1

    b0ba9a64421520ddd785aff3b152b96c5cf5d83e

    SHA256

    fea79b6f43ae69732cf0873bd9a716787eec37f67dd49b5f096eabfbc3fa0a9e

    SHA512

    c7aa89addfdbebccf3c01cb87e65da9e5f109aaff2b89601df4c76362e97d25467171e58045854969507d60e9a3a0686a950208b7af5a0e99ec02a45c9597507

  • /tmp/gates.lod

    Filesize

    4B

    MD5

    83691715fdc5baf20ed0742b0b85785b

    SHA1

    130170f5c2232327c86e1e4cc943f2d16048b98f

    SHA256

    ecb80fffef1947a59eb3fff9d3dddfc60140387317a22d9c0e3f3f85177f3e68

    SHA512

    3c7abde88837718bf51c903cba35f7070d14519a51bf658b09d045b849c65327fe073a65934db7a582e40e0a64517319f44f31b047dca062173711050efd9bbf

  • /tmp/notify.file

    Filesize

    51B

    MD5

    a8e359956a95fbe170064acbb3465f9c

    SHA1

    ebd13340b076d188c621dd7ed3a63e1cd384857c

    SHA256

    0ec1acd5a404cc339ac85cf6fcfd63b88e688220a125bed564062a54bcdc013b

    SHA512

    a475837a06dfbc36e60b8b793115d2484c90c1a082353ea1387fa83fb560e83d03835819df220a8d212d385e1e97f0f13fd99b3464055d1c263317eb44690734