Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    10-08-2024 00:49

General

  • Target

    84337f82e70fbe0922ceca2a568fc872_JaffaCakes118

  • Size

    1.2MB

  • MD5

    84337f82e70fbe0922ceca2a568fc872

  • SHA1

    1b42e66d04d173c157ee8d435580caea92a2880e

  • SHA256

    1457501d4c1a56b46ad04be1514edb9c36c8d49cff0fdd44134d70c724b4f452

  • SHA512

    18f18be3ca37dc0dae2cbdf9aadb74f5506898582c62446ac750e702e9bb58e835b62cd9f09f87faf653df360506feac0414383c565b4ed293e98dc6cf4f5638

  • SSDEEP

    24576:e845rGHu6gVJKG75oFpA0VWeX4q2y1q2rJp0:745vRVJKGtSA0VWeoJu9p0

Score
7/10

Malware Config

Signatures

  • Loads a kernel module 43 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

Processes

  • /tmp/84337f82e70fbe0922ceca2a568fc872_JaffaCakes118
    /tmp/84337f82e70fbe0922ceca2a568fc872_JaffaCakes118
    1⤵
    • Loads a kernel module
    PID:2840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /etc/init.d/DbSecuritySpt

    Filesize

    64B

    MD5

    a9cb6f310b896b0d0ca08db14ad59223

    SHA1

    fbe64fad368701db49f58b81170942db428a1e17

    SHA256

    bed5a67d72d88c71b66418f4bb8d9f96fc3e0af87ff07ac0851bfea701b171ed

    SHA512

    dddd86a4a9365bb766f32eebcb769b5198964f84b7fb2734992ccfaad402749a01c5ecf7119e9041825df7cab540fc322cab3bdb44a95098aa4b3b5373953adb

  • /tmp/conf.n

    Filesize

    73B

    MD5

    6bf4aec4900083b877b652c7f9f5d516

    SHA1

    74d5d2571f2eed67e35bb6cf516a7acf1c399216

    SHA256

    04d822c9d8100ddc01df0f9693581ecb45b26237fa951d7b745e03cf9c33943b

    SHA512

    52bf3bba5e801a26917208c314ba949a03f77f17d7db4432f23daa28effa73373f3ee612dbdd08410c8c30b9e6ad083b82f750530037dfd0a9086a6e8744128a

  • /tmp/gates.lod

    Filesize

    4B

    MD5

    3812f9a59b634c2a9c574610eaba5bed

    SHA1

    98a4760ee296bfed020d6e2da742a44e7368f0ea

    SHA256

    f5884b3c1784c8860e9aa1092480c9a025317f251a989f359b9091ae63e40273

    SHA512

    76cd4130a6cedcae12a48fd942d4cf17773781bb655f603dbd0e322e9c773c662b2477526d39ca947fd37eb689ca68ec5cc57976c3c24d64b2035f2db537fe10

  • /tmp/notify.file

    Filesize

    51B

    MD5

    520cd014733feb33980fc5cd7a7ed511

    SHA1

    f20ae9a654cfa33e7a79029f3505fb92946d889c

    SHA256

    178f9a0b5b302cc327111d0121076c153f2b17ac209d9e3a873acf8842b9af61

    SHA512

    79c33379077f4e90fe06da113f5493868edb52dd27acfa004bed27b7e901c50a7cafe9ebd699df78feb9bcb4f023d965559e41e1c2d9ca76f6bb303998c21012