Overview

overview

6

Static

static

1

a3752b4eb9...kes118

debian-9-armhf

6

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240729-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    17/08/2024, 17:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    a3752b4eb910db34ace444fe33f0ffa5_JaffaCakes118

  • Size

    92KB

  • MD5

    a3752b4eb910db34ace444fe33f0ffa5

  • SHA1

    70c942a1cd4acd8b2eb9d5b70d7cb004706ef5c2

  • SHA256

    a518b2ca19fdaccddc81d94b66fedac6ecf56374bd35677583a662061b9ac779

  • SHA512

    d9e2f58ea8afeb825a06c913ac8a1d0961ffbd7affa584d762706db90c77109e953b191a65e42e4651fc251d4d1e1d0a390f782dba43502fa76a8892f92503fa

  • SSDEEP

    1536:FSiqHwbRuWzi4sB9xQMOvA9dHB1WoAgqWhQaafeJBU1WhRYP3fHd8uPMJ+f6/H2W:WwbRuWzi4sB9xQMOvA9dHB1WoAgqWhQW

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Changes its process name 1 IoCs
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/a3752b4eb910db34ace444fe33f0ffa5_JaffaCakes118
    /tmp/a3752b4eb910db34ace444fe33f0ffa5_JaffaCakes118
    1⤵
    • Reads system routing table
    • Changes its process name
    • Reads system network configuration
    PID:655

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads