aebbdcf6e8938ef7b2bfebfa873c23b866b46a2609b036bfbd2d9f74567c808a

Analysis

max time kernel
148s
max time network
155s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
05-12-2024 18:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c8d2102d5893ac5468a6bdbf97d783c6_JaffaCakes118
Size

121KB
MD5

c8d2102d5893ac5468a6bdbf97d783c6
SHA1

37a8752b9f09903124deb1cb700ffde5888a75fa
SHA256

aebbdcf6e8938ef7b2bfebfa873c23b866b46a2609b036bfbd2d9f74567c808a
SHA512

00f2b2f1409fe8245889aba8e4b6c69fcdbd1f0683b1f9ed0c93bdcf5c46166649f82b5a0775337ffaeabdbc8b53d283cce5c70465e1b6543fb6c43ea42eeb60
SSDEEP

3072:RHX/+e5f+8WygaIPm1OdsDa7omwQEhOXEZe:JX/+e5vgamdsDa7omwQEhwEZe

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	c8d2102d5893ac5468a6bdbf97d783c6_JaffaCakes118

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	c8d2102d5893ac5468a6bdbf97d783c6_JaffaCakes118

/tmp/c8d2102d5893ac5468a6bdbf97d783c6_JaffaCakes118
/tmp/c8d2102d5893ac5468a6bdbf97d783c6_JaffaCakes118
1⤵
- Reads system routing table
- Reads system network configuration
PID:709

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads