Analysis
-
max time kernel
140s -
max time network
158s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
-
submitted
07-01-2025 15:55
General
-
Target
JaffaCakes118_6becc50d51c4d20e0f3e64627424b43b
-
Size
108KB
-
MD5
6becc50d51c4d20e0f3e64627424b43b
-
SHA1
0fcb24e44370c4f18618b0bbd52d513252a8b127
-
SHA256
60956ca81c7ff3f6bb6beea16b62baac47c8d0ea26e4a06fbaff0ede2ff50b63
-
SHA512
cfa498d5eb8a1ee6da96cd191548cd4961a064b7bd497d32367977e8fa1fc24a6f27e5dbcfd6dad8c7174175fe566a404705a31c147cff070539af7169d44aa3
-
SSDEEP
3072:b6an17WtsWhdgYJi0D6mbPbmTQOWsXAOn:Wan17WPJi0D6ibmTQOWCAOn
Score
6/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/JaffaCakes118_6becc50d51c4d20e0f3e64627424b43b/tmp/JaffaCakes118_6becc50d51c4d20e0f3e64627424b43b1⤵
- Reads system routing table
- Reads system network configuration