Overview

overview

10

Static

static

10

d15fb16b5e...kes118

debian-9-armhf

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d15fb16b5e1f1b67eb3c87cd680ec98c_JaffaCakes118

  • Size

    135KB

  • Sample

    240907-h4tj1s1gjk

  • MD5

    d15fb16b5e1f1b67eb3c87cd680ec98c

  • SHA1

    edd22a456e1becca2e34e39d1b7fe865b87c3663

  • SHA256

    baaeab51eb8fb38cb39cde72269878855d6e7a22eeaa7ea0253b337cc5e02be5

  • SHA512

    8413ebfc63fd11a8098b7be87536ae4ba86b591e86b1de9049ef45190c0033c078b0633ad418553ebc691856392273a42c66d37fefe3ab182ca62f685c0be017

  • SSDEEP

    3072:61rFAW6acuV36bzJOVXVseqorMwEEkmhxQwoV3UNu:OX6acuVVXVseq1EkmhxQwoV3UNu

Score
10/10
gafgytdefense_evasiondiscovery

Malware Config

Targets

    • Target

      d15fb16b5e1f1b67eb3c87cd680ec98c_JaffaCakes118

    • Size

      135KB

    • MD5

      d15fb16b5e1f1b67eb3c87cd680ec98c

    • SHA1

      edd22a456e1becca2e34e39d1b7fe865b87c3663

    • SHA256

      baaeab51eb8fb38cb39cde72269878855d6e7a22eeaa7ea0253b337cc5e02be5

    • SHA512

      8413ebfc63fd11a8098b7be87536ae4ba86b591e86b1de9049ef45190c0033c078b0633ad418553ebc691856392273a42c66d37fefe3ab182ca62f685c0be017

    • SSDEEP

      3072:61rFAW6acuV36bzJOVXVseqorMwEEkmhxQwoV3UNu:OX6acuVVXVseq1EkmhxQwoV3UNu

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks