dcf00d9e291bb37887c5f558f710596b37a8a03abc482c00995c26e50ae08eec

Analysis

max time kernel
140s
max time network
151s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
24-11-2024 23:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

97e2160c66d71b8a42befebd87281cf0_JaffaCakes118
Size

97KB
MD5

97e2160c66d71b8a42befebd87281cf0
SHA1

93390f4c378f9b873c49fcb8c044bdb1a142e3e2
SHA256

dcf00d9e291bb37887c5f558f710596b37a8a03abc482c00995c26e50ae08eec
SHA512

4953cc265571b39a8ada66f48050927c029a3c1da91a9270a3b890348aeb6fe60543c7ba59262f8d008e614ef0a489ef595391c23fff84480fe2d798959373e5
SSDEEP

3072:2K5ejA4jB4h89HOPQzM9FqVyL9W9vmrYuOHy+ZNzX:sHjBzuPQQdk9vmrYuOHy+ZNzX

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

Processes:

97e2160c66d71b8a42befebd87281cf0_JaffaCakes118

description	ioc	Process
File opened for reading	/proc/net/route	97e2160c66d71b8a42befebd87281cf0_JaffaCakes118

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

Processes:

97e2160c66d71b8a42befebd87281cf0_JaffaCakes118

description	ioc	Process
File opened for reading	/proc/net/route	97e2160c66d71b8a42befebd87281cf0_JaffaCakes118

/tmp/97e2160c66d71b8a42befebd87281cf0_JaffaCakes118
/tmp/97e2160c66d71b8a42befebd87281cf0_JaffaCakes118
1⤵
- Reads system routing table
- Reads system network configuration
PID:2870

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads