ac82d99b1ec523b4fd42052d1f05b4384c57bb663ac9eff28f62528187d62541

Analysis

max time kernel
145s
max time network
155s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
18-12-2024 05:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fa49781bbfafe3fd29f93f57982b2660_JaffaCakes118
Size

156KB
MD5

fa49781bbfafe3fd29f93f57982b2660
SHA1

4e94479957645804875f4777f5c9e06915372947
SHA256

ac82d99b1ec523b4fd42052d1f05b4384c57bb663ac9eff28f62528187d62541
SHA512

737862e8ebee8a3e6105f09ce3513372bfd0766d4738a8acdbefdcca012d7eded66325363d91038922d46a4c22f75a0926af598cb4904ec8b4fa573255f131d9
SSDEEP

3072:T1g2/eINNlzx2kkQCMOaQcvB6YnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/gYnydM/9MmFwfBxE

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	fa49781bbfafe3fd29f93f57982b2660_JaffaCakes118

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	fa49781bbfafe3fd29f93f57982b2660_JaffaCakes118

/tmp/fa49781bbfafe3fd29f93f57982b2660_JaffaCakes118
/tmp/fa49781bbfafe3fd29f93f57982b2660_JaffaCakes118
1⤵
- Reads system routing table
- Reads system network configuration
PID:703

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads