Analysis
-
max time kernel
133s -
max time network
151s -
platform
debian-12_armhf -
resource
debian12-armhf-20240418-en -
resource tags
arch:armhfimage:debian12-armhf-20240418-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem -
submitted
08-01-2025 23:18
Behavioral task
behavioral1
Sample
JaffaCakes118_b23e58d9e70328a69e5a0bead0ea36cb
Resource
debian12-armhf-20240418-en
debian-12-armhf
1 signatures
150 seconds
General
-
Target
JaffaCakes118_b23e58d9e70328a69e5a0bead0ea36cb
-
Size
171KB
-
MD5
b23e58d9e70328a69e5a0bead0ea36cb
-
SHA1
4df644067e30cde72a3ce75bafffc5e38291f539
-
SHA256
aafc5805b253bf45684614f6013f9f6036a1ea52fc1fe90d4525975c46320830
-
SHA512
8047ff8672e754ab6237eb0bf15576b5fd0a6cbdb4b70d9d9fea8b902a94af2295ff51697c8be7711324f281dc5ba4891dffcc3405778a73a81ac42d88544079
-
SSDEEP
3072:7d6eyKlac7Aa1dq4Zol85hUGLpebpHHvY5F5CF3msQLnh0X0Kr:p6/Uac7A5l85hUG4pHmCF3msQLnh60Kr
Score
4/10
Malware Config
Signatures
-
Changes its process name 4 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself daddyl33t's back 706 JaffaCakes118_b23e58d9e70328a69e5a0bead0ea36cb Changes the process name, possibly in an attempt to hide itself 706 JaffaCakes118_b23e58d9e70328a69e5a0bead0ea36cb Changes the process name, possibly in an attempt to hide itself 711 JaffaCakes118_b23e58d9e70328a69e5a0bead0ea36cb Changes the process name, possibly in an attempt to hide itself 710 JaffaCakes118_b23e58d9e70328a69e5a0bead0ea36cb