Overview

overview

10

Static

static

10

ea5336057c...kes118

ubuntu-24.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea5336057c90d93f0196e60b267a10bc_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240919-bpezratbpg

  • MD5

    ea5336057c90d93f0196e60b267a10bc

  • SHA1

    bd9defee681f4bab8ce3ffe07582e3df6a9fb865

  • SHA256

    3bcb3bb397ed0f5c72de9e19109f6daef8d0a03b8951406b2d442fbb90cdf83d

  • SHA512

    3bdf430fe823d0a2145b17b21a8da4c4e8e30ee2c6fb58b98e472a2b1057ac6c5caa1e336c39d5617542274645294662575f05cc06bca1947ed27d810c04b2bd

  • SSDEEP

    24576:4vRE7caCfKGPqVEDNLFxKsfahI+gIGYuuCol7r:4vREKfPqVE5jKsfahRHGVo7r

Score
10/10
mrblackdefense_evasiondiscoverylinuxpersistencerootkit

Malware Config

Targets

    • Target

      ea5336057c90d93f0196e60b267a10bc_JaffaCakes118

    • Size

      1.1MB

    • MD5

      ea5336057c90d93f0196e60b267a10bc

    • SHA1

      bd9defee681f4bab8ce3ffe07582e3df6a9fb865

    • SHA256

      3bcb3bb397ed0f5c72de9e19109f6daef8d0a03b8951406b2d442fbb90cdf83d

    • SHA512

      3bdf430fe823d0a2145b17b21a8da4c4e8e30ee2c6fb58b98e472a2b1057ac6c5caa1e336c39d5617542274645294662575f05cc06bca1947ed27d810c04b2bd

    • SSDEEP

      24576:4vRE7caCfKGPqVEDNLFxKsfahI+gIGYuuCol7r:4vREKfPqVE5jKsfahRHGVo7r

    Score
    7/10
    defense_evasiondiscoverypersistencerootkit

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

      defense_evasion

    • Executes dropped EXE

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit

    • Write file to user bin folder

      persistence

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks