Overview

overview

10

Static

static

10

eac572ba7d...kes118

debian-9-armhf

6

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240418-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    13-12-2024 09:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    eac572ba7d5bca24284f10baec5d2cf3_JaffaCakes118

  • Size

    105KB

  • MD5

    eac572ba7d5bca24284f10baec5d2cf3

  • SHA1

    e1907e893e2e5334341009eff8b7d8cce8b24f0c

  • SHA256

    3878589b98fb2543114a87d9cfc25dff2430fbbe467044a47084f4af1640feee

  • SHA512

    efc74f9b1d74c59b7bc4b7e8000ba0dbc24802db7e8a6c92acc3ce540fd9dd403d91135a3453082b2f18e8820b3695b85593adc85a3d6eef82a48cd84fa77b05

  • SSDEEP

    3072:MSY+46m1qOzss1FPPKNy+AmkZrQAhPDCXFke:06mgOzJ1FPzmkZrQAhPDCXFke

Score
6/10
discovery

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

    discovery
  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery

Processes

  • /tmp/eac572ba7d5bca24284f10baec5d2cf3_JaffaCakes118
    /tmp/eac572ba7d5bca24284f10baec5d2cf3_JaffaCakes118
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:647

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads