7567cef63c08301c3ac4b4f29e47be9ebf86bc24c8c9040e3438462b33c46984

Analysis

max time kernel
140s
max time network
150s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
03-12-2024 00:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bafaf55e0d2dbe979a525d359d558625_JaffaCakes118
Size

119KB
MD5

bafaf55e0d2dbe979a525d359d558625
SHA1

12d00bcb9e2e9aef705053f17bf47d0b47765804
SHA256

7567cef63c08301c3ac4b4f29e47be9ebf86bc24c8c9040e3438462b33c46984
SHA512

92f5a8a85322168ecc904c428e9914f1092e799fa8744c4e4d473eed22c33269bf52cc4a171bdba6bf6f87243174a732892f959b9f81ba2dba48fa35f758946d
SSDEEP

3072:l1gFZ+CYdbFqwzqlEMsC+YhE9UmL+okC7SqunhXHSBda:omFX6EtfC/okC7SqunhXHSBda

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	bafaf55e0d2dbe979a525d359d558625_JaffaCakes118

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	sshd	2822	bafaf55e0d2dbe979a525d359d558625_JaffaCakes118

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	bafaf55e0d2dbe979a525d359d558625_JaffaCakes118

/tmp/bafaf55e0d2dbe979a525d359d558625_JaffaCakes118
/tmp/bafaf55e0d2dbe979a525d359d558625_JaffaCakes118
1⤵
- Reads system routing table
- Changes its process name
- Reads system network configuration
PID:2822

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads