fbd0116d1f6a8e98c5deddfd2346ebd08f2888ecccd739b5a331f5a8387df642 | Triage

Sharing

General

Target

dd689fcf033a31009bd0959e6d02ea17_JaffaCakes118
Size

103KB
Sample

240913-bvntvawgqp
MD5

dd689fcf033a31009bd0959e6d02ea17
SHA1

a24b5886de221e7320e359b9a56266bbee1825fb
SHA256

fbd0116d1f6a8e98c5deddfd2346ebd08f2888ecccd739b5a331f5a8387df642
SHA512

beff2d69e75458ad604ce8f9f56c4c22bfca91ae159a0273ae85d1960726286822ae9acfd5ef9f24f15be816effc26198f42805d33a3c07deccfa5cb42eb9176
SSDEEP

3072:Q1gZsMA4P0bwfF9OS4S34fI9PF8KQA6AsOVj/AmoymDXVcnYtSEFp:5Kw940PF8KHFmDXVcnYtSEFp

Score

6^/10

discovery linux

Malware Config

Targets

- Target
  
  dd689fcf033a31009bd0959e6d02ea17_JaffaCakes118
- Size
  
  103KB
- MD5
  
  dd689fcf033a31009bd0959e6d02ea17
- SHA1
  
  a24b5886de221e7320e359b9a56266bbee1825fb
- SHA256
  
  fbd0116d1f6a8e98c5deddfd2346ebd08f2888ecccd739b5a331f5a8387df642
- SHA512
  
  beff2d69e75458ad604ce8f9f56c4c22bfca91ae159a0273ae85d1960726286822ae9acfd5ef9f24f15be816effc26198f42805d33a3c07deccfa5cb42eb9176
- SSDEEP
  
  3072:Q1gZsMA4P0bwfF9OS4S34fI9PF8KQA6AsOVj/AmoymDXVcnYtSEFp:5Kw940PF8KHFmDXVcnYtSEFp
Score

6^/10

discovery
- Reads system routing table
  Gets active network interfaces from /proc virtual filesystem.
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1