Analysis
-
max time kernel
120s -
max time network
132s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
03-10-2024 21:32
Behavioral task
behavioral1
Sample
10930e9b91df2c91ca6606e8cf304d1f_JaffaCakes118
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
1 signatures
150 seconds
General
-
Target
10930e9b91df2c91ca6606e8cf304d1f_JaffaCakes118
-
Size
4.5MB
-
MD5
10930e9b91df2c91ca6606e8cf304d1f
-
SHA1
48399aec25e5f5940517a761ff85a542515345ad
-
SHA256
36cfb1a7c971041c9483e4f4e092372c9c1ab792cd9de7b821718ccd0dbb09c1
-
SHA512
6e5804b47f81c862990b32da0c57c4547d75d44f32a8826f7ecdf937ec4114bd0df47457b2fb7461f3fd6fe9a579c5289b02a6fcceb460098d13e374a1e5dfcc
-
SSDEEP
49152:qcP4AQRe6w1LEekNEIx7OCa9NeAdWTxedLjUCszWvKS71LTRAfT+GDWM2tJ11sqq:9D2NEPCkWTqLICGW5LNAqv/i
Score
7/10
Malware Config
Signatures
-
Loads a kernel module 11 IoCs
Loads a Linux kernel module, potentially to achieve persistence
pid Process 4067 10930e9b91df2c91ca6606e8cf304d1f_JaffaCakes118 4067 10930e9b91df2c91ca6606e8cf304d1f_JaffaCakes118 4067 10930e9b91df2c91ca6606e8cf304d1f_JaffaCakes118 4067 10930e9b91df2c91ca6606e8cf304d1f_JaffaCakes118 4069 10930e9b91df2c91ca6606e8cf304d1f_JaffaCakes118 4067 10930e9b91df2c91ca6606e8cf304d1f_JaffaCakes118 4067 10930e9b91df2c91ca6606e8cf304d1f_JaffaCakes118 4070 10930e9b91df2c91ca6606e8cf304d1f_JaffaCakes118 4070 10930e9b91df2c91ca6606e8cf304d1f_JaffaCakes118 4070 10930e9b91df2c91ca6606e8cf304d1f_JaffaCakes118 4071 10930e9b91df2c91ca6606e8cf304d1f_JaffaCakes118