Analysis
-
max time kernel
140s -
max time network
162s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem -
submitted
06-01-2025 07:22
Behavioral task
behavioral1
Sample
JaffaCakes118_15fe1be0181a3eb3cc0c9eca795e1baf
Resource
debian12-armhf-20240221-en
debian-12-armhf
2 signatures
150 seconds
General
-
Target
JaffaCakes118_15fe1be0181a3eb3cc0c9eca795e1baf
-
Size
116KB
-
MD5
15fe1be0181a3eb3cc0c9eca795e1baf
-
SHA1
ae6b11f234e6112c0e1e166731cf27189393d150
-
SHA256
cece82b7a8d4d9d778549a6be2818fc7bb8ce944335162f8408ad817b6e2de31
-
SHA512
84c0562b65a6b90026b82ffe4d4bc91c091dd6184ff69db5d1497756d6a592ebc26873cfcabce74cbcddee5d94011e14f280de5f472f919fad519130feb5a53b
-
SSDEEP
3072:idwracAAviNmLpMQ1xr5hKHKSrbqlAdmyDQUJ1UX4Tn:SwraFgikxr5hKHKnlAdmyDQUJ1a4Tn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route JaffaCakes118_15fe1be0181a3eb3cc0c9eca795e1baf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route JaffaCakes118_15fe1be0181a3eb3cc0c9eca795e1baf