8c2666b05c4c620d6ec0eff56d132a44a419290f3605810615e556f9e7380d6d

Analysis

max time kernel
149s
max time network
150s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240522.1-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240522.1-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
24-08-2024 15:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bedc226053ce4b8834a0cdf0e73933a8_JaffaCakes118
Size

83KB
MD5

bedc226053ce4b8834a0cdf0e73933a8
SHA1

99a9906a1ffe5af74c84a16ca9f69b7b0e35ddb7
SHA256

8c2666b05c4c620d6ec0eff56d132a44a419290f3605810615e556f9e7380d6d
SHA512

9d16302cd3fd4836e12c0d86fe4c2feb33e64673d76a2631526453c4529c7e8bc506ab3045408ff8963498e8f95d0ac40134d82efa6da70d47c980a314fde97c
SSDEEP

1536:ybZ5Bp6mIQDHOUtlsKWqQ9GcBrXNpNrz3tQC6/c/U//CVaJafo1aHqQ:ybZ5Kmrp4T9GcBr9pTf6/c/U//CUJafv

Score

9^/10

discovery

Malware Config

Signatures

Contacts a large (38119) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	bedc226053ce4b8834a0cdf0e73933a8_JaffaCakes118

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	bedc226053ce4b8834a0cdf0e73933a8_JaffaCakes118

/tmp/bedc226053ce4b8834a0cdf0e73933a8_JaffaCakes118
/tmp/bedc226053ce4b8834a0cdf0e73933a8_JaffaCakes118
1⤵
- Reads system routing table
- Reads system network configuration
PID:1558

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads