Overview

overview

10

Static

static

10

a1c5ded314...kes118

ubuntu-22.04-amd64

6

Analysis

  • max time kernel
    140s
  • max time network
    148s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240729-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240729-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    17-08-2024 08:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a1c5ded31454f06a10be777c4d88a1fa_JaffaCakes118

  • Size

    171KB

  • MD5

    a1c5ded31454f06a10be777c4d88a1fa

  • SHA1

    9242d3ce9601a8b4aa4cf2da55192942e6e48ee2

  • SHA256

    462bd69ab0efcb6ebdbe84d78a58b32580fd1bf2b06a32abda4974ec120e1f3f

  • SHA512

    6d81b520f138da72f2588e54ed91fa6c7db99ef4778e91551c544642379a87ff82de4fa0c71e69f448e449857caa0848c99b4412016345606d27b4a3a7598a82

  • SSDEEP

    3072:rb2nWy9MdDFblJqD1W8oHnO5iEfsVweGBlbZYLcFg2gTNLPOLVPU8oJDHX:X5xOXiO5iEkwliLcFdgThPOLVPU8oJD3

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Changes its process name 1 IoCs
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/a1c5ded31454f06a10be777c4d88a1fa_JaffaCakes118
    /tmp/a1c5ded31454f06a10be777c4d88a1fa_JaffaCakes118
    1⤵
    • Reads system routing table
    • Changes its process name
    • Reads system network configuration
    PID:1579

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads