Analysis
-
max time kernel
146s -
max time network
149s -
platform
debian-12_armhf -
resource
debian12-armhf-20240418-en -
resource tags
arch:armhfimage:debian12-armhf-20240418-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem -
submitted
09-01-2025 02:53
Behavioral task
behavioral1
Sample
JaffaCakes118_ba1b112431e1f272bf68823da374fc8e
Resource
debian12-armhf-20240418-en
debian-12-armhf
2 signatures
150 seconds
General
-
Target
JaffaCakes118_ba1b112431e1f272bf68823da374fc8e
-
Size
122KB
-
MD5
ba1b112431e1f272bf68823da374fc8e
-
SHA1
a23ffb73fa7692d53d3028753aed3dcecf05cbc6
-
SHA256
db002ede498a5af3efb83d627392ccfc45145036875f64d13118ef5b166467dc
-
SHA512
b8bcb8424913a9ffc3f258d4c68b2c8002ebd8305e4bf24f90c16ef05698eca13d64141139a18f087518727cef51f5e6cc12db670b2bc0da92f65adebfec2190
-
SSDEEP
3072:+KhtPUfCBPi49iuFcpQe8ZVu6h+amQxVTGyz:+KgfqPiSiuFcpQTVl+amQxVVz
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 706 JaffaCakes118_ba1b112431e1f272bf68823da374fc8e -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself i8je5elp3jusv6jsspmip4w2 706 JaffaCakes118_ba1b112431e1f272bf68823da374fc8e