Analysis
-
max time kernel
140s -
max time network
148s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240729-en -
resource tags
-
submitted
19/09/2024, 04:35
General
-
Target
ea986c44730d412c1501d4fd6b0e0557_JaffaCakes118
-
Size
156KB
-
MD5
ea986c44730d412c1501d4fd6b0e0557
-
SHA1
b6e75f3d05c798b5e4e9d9a19932c86e72e6c243
-
SHA256
f96084d10a965b9acce7ba5bf82f36c26d046d9b4685f08999dbf20626365d55
-
SHA512
7ec905115ea3141066acda22013dc64463c7ca9a56a3b0be4384a5c74425a94f8ab247810957e47ac48318d02b0db6d030cc1de6bec6f3b9b711d03f25fc85f9
-
SSDEEP
3072:ek3jUcbsOgUnvnawGZsMb5rLjJ9mReLCj/PYc1E/7HBe5:J1zTM1rh9mReLCj/PYc1E/7HBe5
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Changes its process name 1 IoCs
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/ea986c44730d412c1501d4fd6b0e0557_JaffaCakes118/tmp/ea986c44730d412c1501d4fd6b0e0557_JaffaCakes1181⤵
- Reads system routing table
- Changes its process name
- Reads system network configuration