Analysis
-
max time kernel
145s -
max time network
134s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20240611-en -
resource tags
-
submitted
09-12-2024 14:02
General
-
Target
d9f96734df11b555bde3c1805e03dcae_JaffaCakes118
-
Size
101KB
-
MD5
d9f96734df11b555bde3c1805e03dcae
-
SHA1
eba5ebfd64c74caec69167cac1ea17777ae793fd
-
SHA256
d192d892243d1d666da99f66da1933a2bc121744092b777ed11a3c03f3d36b7f
-
SHA512
bd0330bca0646c355d5316dcb1e344354b58702a8ce2185fc8fcc613cb1126712789c92a6661208ff490d7b0906a2f072d3152ff24befe1c2c8127274c26b4ec
-
SSDEEP
3072:wW8FUmgujld6Mkxm6AJ+4f+HmmFVcqq0GnDZT:wJFv4Lm6AJ+4f+HmmFVcqq0GnDZT
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Changes its process name 1 IoCs
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/d9f96734df11b555bde3c1805e03dcae_JaffaCakes118/tmp/d9f96734df11b555bde3c1805e03dcae_JaffaCakes1181⤵
- Modifies Watchdog functionality
- Reads system routing table
- Changes its process name
- Reads system network configuration