Overview

overview

6

Static

static

1

d29a2f3712...kes118

debian-9-mips

6

Analysis

  • max time kernel
    140s
  • max time network
    150s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240611-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    07/09/2024, 18:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d29a2f37125b1b04e81b4472880c5605_JaffaCakes118

  • Size

    116KB

  • MD5

    d29a2f37125b1b04e81b4472880c5605

  • SHA1

    7480f012faf6233afb804383297228fb2ab200cb

  • SHA256

    7ecc9176684cc5e6151e3607af04264d59f109a92adfeffc75d891fc0819ac3e

  • SHA512

    99b5981d220be9b6d4f4e020bb03ddeb696d51514c99c99b96ea4f448c1607483e1d0443635b1b92de72f1de267ad9d1422d1a2de3f1f414076ce7162d9c287c

  • SSDEEP

    1536:fVNy7Ksv/V1Kn+VIUEp/NdJkt2PYQjP2rK4PFHi/uYe7ealpMD/YNO5e+vg8:KflCjoC/uYePpU9I8

Score
6/10
discovery

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

    discovery
  • Changes its process name 1 IoCs
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery

Processes

  • /tmp/d29a2f37125b1b04e81b4472880c5605_JaffaCakes118
    /tmp/d29a2f37125b1b04e81b4472880c5605_JaffaCakes118
    1⤵
    • Reads system routing table
    • Changes its process name
    • Reads system network configuration
    PID:705

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads