ad246f32545a76cd0ef1ffbf7aab0845653b08896a85de8db8443290fb8793ba

Analysis

max time kernel
140s
max time network
151s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
07-12-2024 12:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d28421968a5a36bf005c9112bee64cf0_JaffaCakes118
Size

110KB
MD5

d28421968a5a36bf005c9112bee64cf0
SHA1

b2b7b08e564836277ac268afe1182a5ec3fc2105
SHA256

ad246f32545a76cd0ef1ffbf7aab0845653b08896a85de8db8443290fb8793ba
SHA512

f83fa30de9872ecfffac034d1c2d9371efc0a889f20eeb4e25773ac7b76855b42b6752e083b51ab4e3f76581b208dacd0058c4c174fcefcc7ef095713f7562d8
SSDEEP

3072:9lX2jKRi0ZDvCTpRv7DSubUmGVrQAXiUXouX:6j6ZUpRv7DImGVrQAXiUXouX

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	d28421968a5a36bf005c9112bee64cf0_JaffaCakes118

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	d28421968a5a36bf005c9112bee64cf0_JaffaCakes118

/tmp/d28421968a5a36bf005c9112bee64cf0_JaffaCakes118
/tmp/d28421968a5a36bf005c9112bee64cf0_JaffaCakes118
1⤵
- Reads system routing table
- Reads system network configuration
PID:644

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads