Overview

overview

10

Static

static

10

e87eb310ee...kes118

ubuntu-22.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e87eb310eefd8f7a9a4a79862113e760_JaffaCakes118

  • Size

    101KB

  • Sample

    240918-g127bawfnb

  • MD5

    e87eb310eefd8f7a9a4a79862113e760

  • SHA1

    5a10c05393da41130701df11a63c104e11ef44b0

  • SHA256

    58d135239b15c533c63d13563e6e55f3e0bbe916c0e600aaffda61a99e532030

  • SHA512

    158b3eff2d0f2d6f8d999f4ea9c0313cd65e1fa03f6abc7337b2cce685918a75bf1e51010f08c55949530060af2578f03e05891d98169b98bcea9ee26f269cd3

  • SSDEEP

    3072:wW8FUmgujld6Mkxm6AJ+4fVHmmFVcqq0GnDZT:wJFv4Lm6AJ+4fVHmmFVcqq0GnDZT

Score
10/10
gafgytdefense_evasiondiscoverylinux

Malware Config

Targets

    • Target

      e87eb310eefd8f7a9a4a79862113e760_JaffaCakes118

    • Size

      101KB

    • MD5

      e87eb310eefd8f7a9a4a79862113e760

    • SHA1

      5a10c05393da41130701df11a63c104e11ef44b0

    • SHA256

      58d135239b15c533c63d13563e6e55f3e0bbe916c0e600aaffda61a99e532030

    • SHA512

      158b3eff2d0f2d6f8d999f4ea9c0313cd65e1fa03f6abc7337b2cce685918a75bf1e51010f08c55949530060af2578f03e05891d98169b98bcea9ee26f269cd3

    • SSDEEP

      3072:wW8FUmgujld6Mkxm6AJ+4fVHmmFVcqq0GnDZT:wJFv4Lm6AJ+4fVHmmFVcqq0GnDZT

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks