Analysis

  • max time kernel
    149s
  • max time network
    148s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240729-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    17-08-2024 02:22

General

  • Target

    a0db03fec7dbafe539c556df63cc196a_JaffaCakes118

  • Size

    1.1MB

  • MD5

    a0db03fec7dbafe539c556df63cc196a

  • SHA1

    acb573400b6389802a0bf7d643b520bef02d6484

  • SHA256

    4e74090bc80f1c39f8e9bc6a0c544ccddc9c8cbdbdfe5eb511d84ad53cd68e7c

  • SHA512

    d731697901b4623d77f3d8b0fe63c3b531f1ccd2da9413a7e303f2943f08b1674532d5db984db55b33f2500596997c63fc13a76bb5ac911ab5288d3f6563d8d2

  • SSDEEP

    24576:4vRE7caCfKGPqVEDNLFxKsfaDI+gIGYuuCol7r:4vREKfPqVE5jKsfaDRHGVo7r

Score
7/10

Malware Config

Signatures

  • Loads a kernel module 37 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

Processes

  • /tmp/a0db03fec7dbafe539c556df63cc196a_JaffaCakes118
    /tmp/a0db03fec7dbafe539c556df63cc196a_JaffaCakes118
    1⤵
    • Loads a kernel module
    PID:2498

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /etc/init.d/VsystemsshMdt

    Filesize

    64B

    MD5

    17ac405a5e8ab3cafa7481ae94823b57

    SHA1

    5728e24bafa3778c2f05e44bf10811439fe72786

    SHA256

    cfc70429ebd692951ef8dfaa69b71d5249e1b0ac9719c90485d3bc01e8ce5709

    SHA512

    da19af1dd040be8b6ee3b756d2159d20fb046c6efdc6f43bb3b7f351f2fbbc53802bbe9b04bd0d7c80853f6da9b4c257b0e054f2e49444001b7debec204e7784

  • /tmp/conf.n

    Filesize

    69B

    MD5

    520ae35dd73824ca407c8d8224ce7032

    SHA1

    b47d0c7ac69b3336a88fbc7e6234b8785fd05b5d

    SHA256

    9bbf7a5c27414f1c3693aa2d7c39ba71ca9c0cd16ec25b84a9bb868863a8366d

    SHA512

    11e8fd3da2c321a583afa62ddd84f3b12ebd22e81786a3ce05f010a0b21a5c30d3ffcb2cbc3f36b5f448b3cc0ef8aacf91349982c70d09c61851631d68deb744

  • /tmp/notify.file

    Filesize

    51B

    MD5

    90f7ca30baad8db8046b40771b7b527b

    SHA1

    576074ee5d36b0dcd7fde6f4152daf8d23559869

    SHA256

    707faf0805e082f3225f9e5e826de5c26e33c2389d771ddc1e64cf40b25cd8a2

    SHA512

    13097358c3d8c9bc5d495d7d12a36caf04cd513e2d91e9480b66e6299a57693e08a5934019c298c5a9d43a8490d0372791bd5fcc9aca72800972131cc3c27543

  • /tmp/vga.conf

    Filesize

    4B

    MD5

    cd10c7f376188a4a2ca3e8fea2c03aeb

    SHA1

    3650af9a91eb8ff3280bccd90d2de225618d0f23

    SHA256

    2326b09b5e1f59de45c1ed58a00337ddc2966eb5bc60cdc33d3171e9758ef576

    SHA512

    330b86eab3792a1da8a8e4053cec297dce3cf2666b4b235f409a476da9782b2943c2a498e29d84970c0b10f6b8aeca9c7b86279f46fa6eff6e2878a3019fe456