Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    12-08-2024 02:17

General

  • Target

    8cec7b881174ece87b57545680e6fa5c_JaffaCakes118

  • Size

    1.1MB

  • MD5

    8cec7b881174ece87b57545680e6fa5c

  • SHA1

    b01fd989fdf055683673259e295e4a0790bd661f

  • SHA256

    5a579399bcf7a1c61d851e26a768bc14d423ee6b9ce98d0e89829c92bfd2da64

  • SHA512

    6e34c9b4801e1aaba5cfcccd7dd5eb43950c8ee064f05555fd4b26ee547fbb714f03f7603b5689e6cf382ae7c17bf953c8ed77c5a9be95c7684c1f61ccc7b0e4

  • SSDEEP

    24576:4vRE7caCfKGPqVEDNLFxKsfalI+gIGYuuCol7r:4vREKfPqVE5jKsfalRHGVo7r

Score
7/10

Malware Config

Signatures

  • Loads a kernel module 37 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

Processes

  • /tmp/8cec7b881174ece87b57545680e6fa5c_JaffaCakes118
    /tmp/8cec7b881174ece87b57545680e6fa5c_JaffaCakes118
    1⤵
    • Loads a kernel module
    PID:2479

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /etc/init.d/VsystemsshMmt

    Filesize

    64B

    MD5

    c28b908653f7219481360631d94f227e

    SHA1

    0ba3842aa47c2ec36ee0fc4532dfab0256bc8a88

    SHA256

    43abcf366800e0659854a17a6c4a574c54c506b6a4087b6ec11a32f9b22e0388

    SHA512

    aa8c638cfb1ddb077140b2f98ffad56136554f120770e137123b1ab857543b178dfdc125b81846cb392dd5426afe2381024ae74de8f395dbe84f9281c4e16878

  • /tmp/Dest.cfg

    Filesize

    4B

    MD5

    b06b5541a62ed438f956b662b4e1ec28

    SHA1

    6f751b16b8d2edbd6d389c5ba0ada75d78f184d6

    SHA256

    18167da210996cf3525e400870f7d4955d6b983a7b7d237586e242e59888ad86

    SHA512

    8925c60b4398efb55db246b74a2b7dfd83202b71597251efd62e5757f45d6d821959717f5a6b614589a5ff12c3a0b75db98ee04efb66bc93e31a6dff85206549

  • /tmp/notify.file

    Filesize

    51B

    MD5

    68822b115cac0611f85675d802c4071b

    SHA1

    141298e91b90e433db15082cbc016d85490c520e

    SHA256

    d1d0f11e2446a6c61c6a5bb7740bceb3002b317dc817156519af6c0b6c3560db

    SHA512

    1e7051988248a19f349db3abd9971146b983b32762a86bb869e903de4615b677abfe3c1a8209816220d7ba06bbbd2bd0f05b6b8ce299c377ef15ff14f34733cc