Analysis
-
max time kernel
120s -
max time network
137s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240729-en -
resource tags
-
submitted
18/08/2024, 23:06 UTC
General
-
Target
a89636d85f945b132ff3d7b485372ac4_JaffaCakes118
-
Size
130KB
-
MD5
a89636d85f945b132ff3d7b485372ac4
-
SHA1
00127c728ca5fe6d274e8956e592a2bbcdefcea5
-
SHA256
54c222664aaf0895550fb0815acff192455a1f6dd1eeb807ac324c0ea54df97f
-
SHA512
72426b2157af1354832e967e93b0bac5d6baea1b08e2f495f0ba32809a326d8d8d814b19b38c3e1afcab7f5217893a3af91af1000313676ff2774281b39a9e7b
-
SSDEEP
3072:CHCISQc747ZXiibhQ3Q6MjfiUfnLsJi6eGW:uCLc8ahL6MjfiUfnLsE6eGW
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Changes its process name 1 IoCs
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/a89636d85f945b132ff3d7b485372ac4_JaffaCakes118/tmp/a89636d85f945b132ff3d7b485372ac4_JaffaCakes1181⤵
- Reads system routing table
- Changes its process name
- Reads system network configuration
Network
- No results found
-
81.4.101.221:23 -
81.4.101.221:23
-
81.4.101.221:23
No results found