Overview

overview

10

Static

static

10

d90e09c697...kes118

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d90e09c697db710727f47f9036246519_JaffaCakes118

  • Size

    127KB

  • Sample

    241209-lzsnpsymhr

  • MD5

    d90e09c697db710727f47f9036246519

  • SHA1

    8d83fc162c1a0386d116911a18d311ed8d64e79c

  • SHA256

    0fe7a12443ccdff5636692229e9fa80ab25764d17c5c2e1b1d4bc14a0864c8a8

  • SHA512

    1a74a31649f73388685445f33355534b40cf79cd9c7af6c39a318818c551fc5584cd12f0a0c4c0d2505fedd31ec0957fce76cdc75ea72827a8e052d2a6f643b9

  • SSDEEP

    3072:kifhxhAa6Qy/D0GiG23g+84ybitmh6Q5bg+YWNu:TZvAa6Qyi3g+84yWtmh6Q50+YWNu

Score
10/10
gafgytdefense_evasiondiscovery

Malware Config

Targets

    • Target

      d90e09c697db710727f47f9036246519_JaffaCakes118

    • Size

      127KB

    • MD5

      d90e09c697db710727f47f9036246519

    • SHA1

      8d83fc162c1a0386d116911a18d311ed8d64e79c

    • SHA256

      0fe7a12443ccdff5636692229e9fa80ab25764d17c5c2e1b1d4bc14a0864c8a8

    • SHA512

      1a74a31649f73388685445f33355534b40cf79cd9c7af6c39a318818c551fc5584cd12f0a0c4c0d2505fedd31ec0957fce76cdc75ea72827a8e052d2a6f643b9

    • SSDEEP

      3072:kifhxhAa6Qy/D0GiG23g+84ybitmh6Q5bg+YWNu:TZvAa6Qyi3g+84yWtmh6Q50+YWNu

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks