Analysis
-
max time kernel
140s -
max time network
150s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
05-01-2025 15:12
Behavioral task
behavioral1
Sample
JaffaCakes118_ac83958e4f7ba86cf8983549e954052d
Resource
ubuntu1804-amd64-20240611-en
ubuntu-18.04-amd64
2 signatures
150 seconds
General
-
Target
JaffaCakes118_ac83958e4f7ba86cf8983549e954052d
-
Size
83KB
-
MD5
ac83958e4f7ba86cf8983549e954052d
-
SHA1
f2268739835f00cc00bfb33500cdda95fec4e08f
-
SHA256
e66209fd451916a008eb1a383507ef4be806e0533e83dee9d191d3bbbd865b1a
-
SHA512
925c69fc7110dcd5f8719fe4d23917f9b11328b891357f8d72590a472222ae9cfc92ab969ac7d3bcb20eb5b4c4adec96498aacbc266379d150aef3a4bfe0369c
-
SSDEEP
1536:W35b9Vc4N3J6lreu5r4hWj8LNWDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0YZ2oRmEwVOz+ucfW7k
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route JaffaCakes118_ac83958e4f7ba86cf8983549e954052d -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route JaffaCakes118_ac83958e4f7ba86cf8983549e954052d