Overview

overview

6

Static

static

1

cea619f462...kes118

debian-9-armhf

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    cea619f462b2c8c3f10a1797ac219033_JaffaCakes118
  • Size 537KB
  • Sample240906-e133hawdmm
  • SHA256 aab71f212e56657d6e7892e5a0c8706e9a38d779637a1ddb63d19b6b8a1b3f2c
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10
discoveryexecutionpersistenceprivilege_escalatio

Malware Config

Targets

    • Target
      cea619f462b2c8c3f10a1797ac219033_JaffaCakes118
    • Size 537KB
    • SHA256 aab71f212e56657d6e7892e5a0c8706e9a38d779637a1ddb63d19b6b8a1b3f2c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    6/10
    discoveryexecutionpersistenceprivilege_escalatio

    • Attempts to change immutable files

      Modifies inode attributes on the filesystem to allow changing of immutable files.

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

      executionpersistenceprivilege_escalatio
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks