Analysis
-
max time kernel
147s -
max time network
148s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system -
submitted
26/08/2024, 02:27
Static task
static1
Behavioral task
behavioral1
Sample
c219ca9d1ae2ddcc665b84cff3425840_JaffaCakes118
Resource
ubuntu2204-amd64-20240611-en
2 signatures
150 seconds
General
-
Target
c219ca9d1ae2ddcc665b84cff3425840_JaffaCakes118
-
Size
70KB
-
MD5
c219ca9d1ae2ddcc665b84cff3425840
-
SHA1
a2cfc338ec6d567377c97f944762b09c5934eea7
-
SHA256
b4679ab05485812110484a6a759cc13d1259f295c6f24fad8d7ff7ecaa5fa6a7
-
SHA512
68ebdc67092deb74d8d152ec71673aa885d54c2908956f19d488b640bff5a95bd428ff7b42b061518877cbe70c60378193d82d17901c322aae441ea8130b15cf
-
SSDEEP
1536:k9eWy2UXE91HSCmBNjoRJU5931k9icBBWBPz7Ur7:k9eWy7XWy/eRahe9FQBPX87
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog c219ca9d1ae2ddcc665b84cff3425840_JaffaCakes118 File opened for modification /dev/misc/watchdog c219ca9d1ae2ddcc665b84cff3425840_JaffaCakes118 -
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 1560 c219ca9d1ae2ddcc665b84cff3425840_JaffaCakes118