Resubmissions
09-12-2024 15:46
241209-s74jhaxnfp 10Analysis
-
max time kernel
146s -
max time network
151s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
09-12-2024 15:46
Behavioral task
behavioral1
Sample
da5d984354e61d851b50ba42d5f09105_JaffaCakes118
Resource
debian9-mipsbe-20240611-en
debian-9-mips
2 signatures
150 seconds
General
-
Target
da5d984354e61d851b50ba42d5f09105_JaffaCakes118
-
Size
123KB
-
MD5
da5d984354e61d851b50ba42d5f09105
-
SHA1
7a7e7de91ae554469ec91032a0343b4bde671009
-
SHA256
e70b682d51c26ef0d7ea5dcfe8f9469a187f6a103f4b95bd89c1b525f08d77ab
-
SHA512
72b63f3025396b73f1ea98ca4a31f556690f4b329e5d4e1a17975ebfde17fddf5475266801c41592e2003d47338e39a1c5f8e3561e14a3659f6d29a4a213bd9e
-
SSDEEP
1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBeKEdWfRZrmW+IFj:Ted0W0MZQHYd6RZrmW+IFB1Dt1hR/
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route da5d984354e61d851b50ba42d5f09105_JaffaCakes118 -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route da5d984354e61d851b50ba42d5f09105_JaffaCakes118