Analysis
-
max time kernel
149s -
max time network
148s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
05-09-2024 23:34
Behavioral task
behavioral1
Sample
ce284c1093ebc7ecdb4c0aba55ea97f3_JaffaCakes118
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
1 signatures
150 seconds
General
-
Target
ce284c1093ebc7ecdb4c0aba55ea97f3_JaffaCakes118
-
Size
195KB
-
MD5
ce284c1093ebc7ecdb4c0aba55ea97f3
-
SHA1
3958021a8986102442ecea5f93892bdb72d864f0
-
SHA256
49eeaaa3cf3a302489a9a82cf39f8c61b41f638bdbb9274c2f492c3f98c84d79
-
SHA512
730ef0c8b9dca8934cd50216e6710963f22e054e3d4199d43808afcf4ec41e98447b6b03045be611ead954eaf68fbd5b665c22d0c8353f79a6c3ee07379d102a
-
SSDEEP
3072:2uZHKa7IS0at/Ycve0HLp1e+lPwHbOEWCRn4QGQuTW5r/GbpwFp4:ea7Z5W2LbeIPwDn4QGQuTW5r/GbpwFp4
Score
7/10
Malware Config
Signatures
-
Loads a kernel module 64 IoCs
Loads a Linux kernel module, potentially to achieve persistence
Processes:
ce284c1093ebc7ecdb4c0aba55ea97f3_JaffaCakes118pid process 2534 ce284c1093ebc7ecdb4c0aba55ea97f3_JaffaCakes118 2534 ce284c1093ebc7ecdb4c0aba55ea97f3_JaffaCakes118 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535 2535