084bd7f1ba6d065632cbc7b22681b2a6cc1030c68c8a48897572fba4236cb134

Analysis

max time kernel
140s
max time network
149s
platform
debian-9_armhf
resource
debian9-armhf-20240729-en
resource tags

arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
08-01-2025 08:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_972f767dea4fdc0097296e6182cbe39f
Size

98KB
MD5

972f767dea4fdc0097296e6182cbe39f
SHA1

475e5b2cbebab4c47d621cb0fc8041d40319d31d
SHA256

084bd7f1ba6d065632cbc7b22681b2a6cc1030c68c8a48897572fba4236cb134
SHA512

d65c67bad5f1a58ac84a7f980169b2e000f9494f4dd27cecca17449462d53ab84a9685c0983bc1005e60ba92c0d807e4b948f77d7c607a951fc6ce2bb5582b56
SSDEEP

3072:1Sl+W6maaWnINPXPxC5iKmZuqQ4DPwXXtse:y6mBWnoPXP9KmZuqQ4DPwXXtse

Score

6^/10

discovery

Malware Config

Signatures

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	JaffaCakes118_972f767dea4fdc0097296e6182cbe39f

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/route	JaffaCakes118_972f767dea4fdc0097296e6182cbe39f

/tmp/JaffaCakes118_972f767dea4fdc0097296e6182cbe39f
/tmp/JaffaCakes118_972f767dea4fdc0097296e6182cbe39f
1⤵
- Reads system routing table
- Reads system network configuration
PID:646

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads