3ba9c421a3705d3bd77deffd93caff6f7fde8e74e414242a15cde19ca63124cf

Analysis

max time kernel
0s
max time network
137s
platform
ubuntu-20.04_amd64
resource
ubuntu2004-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu2004-amd64-20240508-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
submitted
17/08/2024, 11:21

Target

a25533dd3ee8c72cc3ee557e612c178f_JaffaCakes118
Size

57KB
MD5

a25533dd3ee8c72cc3ee557e612c178f
SHA1

5c159b06d67f8e73a180418b851b4bb77d1e0b04
SHA256

3ba9c421a3705d3bd77deffd93caff6f7fde8e74e414242a15cde19ca63124cf
SHA512

4a76759f2012a649a3bab8fe76f1c458faf23435d10ab6c2fcfce33f3fb558abc35dd2a4a2c887b6ba2948f911250e29f5a291da18d14252a09dbf2db022c110
SSDEEP

1536:hUNsDXHdBx3ihouL1EJojMVvKWwuNzvAe642W:hgsrHdBxIbLLjMlKWzNzoB

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1403	a25533dd3ee8c72cc3ee557e612c178f_JaffaCakes118

Modifies Watchdog functionality 1 TTPs 2 IoCs

Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

Impair Defenses

description	ioc	Process
File opened for modification	/dev/watchdog	a25533dd3ee8c72cc3ee557e612c178f_JaffaCakes118
File opened for modification	/dev/misc/watchdog	a25533dd3ee8c72cc3ee557e612c178f_JaffaCakes118

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact