Analysis
-
max time kernel
149s -
max time network
153s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
29-08-2024 18:22
Behavioral task
behavioral1
Sample
c95e67b69e594c42947710e0a920c303_JaffaCakes118
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
6 signatures
150 seconds
General
-
Target
c95e67b69e594c42947710e0a920c303_JaffaCakes118
-
Size
1.2MB
-
MD5
c95e67b69e594c42947710e0a920c303
-
SHA1
2e3949d639b98f137b163345583b9f4796b01a13
-
SHA256
7c5ecb1d56859abb82aea6c0bbbb3c541deadd8990f302af90a49215484e0731
-
SHA512
fd0830caf8f2d151a8a0fc1180b06024b87671975647d646a983f3833669677d85f64d7d76308a432bbdd0685e0e2e601b0ab3bd1ebca170ff69d28db6509b73
-
SSDEEP
24576:e845rGHu6gVJKG75oFpA0VWeX4y2y1q2rJp0:745vRVJKGtSA0VWeoBu9p0
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 2 IoCs
Processes:
getty.sshdioc pid Process /usr/bin/bsd-port/getty 2845 getty /usr/bin/.sshd 2863 .sshd -
Loads a kernel module 64 IoCs
Loads a Linux kernel module, potentially to achieve persistence
Processes:
c95e67b69e594c42947710e0a920c303_JaffaCakes118getty.sshdpid Process 2821 c95e67b69e594c42947710e0a920c303_JaffaCakes118 2823