Analysis

  • max time kernel
    141s
  • max time network
    153s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240611-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    13-12-2024 06:32

General

  • Target

    ea5809ed6a280ff49060e12e788d4eaa_JaffaCakes118

  • Size

    123KB

  • MD5

    ea5809ed6a280ff49060e12e788d4eaa

  • SHA1

    998c3dc4283b011f71b7c7484de9e1cd3a7bad44

  • SHA256

    7b7c0e85ac5c9e3163bf8d709894575ba2e2a46fb9724601f6a6cba4a69ce250

  • SHA512

    a6e7939e05598d1db252a3dfb95297a669aede5fe55149b145f37f602c2a553fc13b53dc5a4969bef6c6b5f6d2d04822d7b070b1bc4e2b400ffd01ceae0e72b2

  • SSDEEP

    1536:47je1TwGq+f+AM2rK/jeve9eLe8B2rK/4eBmq0GAzQj1l72HBe6EJWfRZrmW+IFj:3ClkB0MZQHUJ6RZrmW+IFB1Dt1hR/

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/ea5809ed6a280ff49060e12e788d4eaa_JaffaCakes118
    /tmp/ea5809ed6a280ff49060e12e788d4eaa_JaffaCakes118
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:698

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads