Analysis Overview
score
10/10
SHA256
587530cad100dbf607b0b2d204ebfd1fa44ee4cc9f292c2a7a785fcaa71b011b
Threat Level: Known bad
The file JaffaCakes118_05ce1925dfa6ded96fca92d4ac0c9d8a was found to be: Known bad.
Malicious Activity Summary
Kaiten family
Detects Kaiten/Tsunami Payload
Detects Kaiten/Tsunami payload
MITRE ATT&CK
N/A
Analysis: static1
Detonation Overview
Reported
2025-05-16 20:50
Signatures
Detects Kaiten/Tsunami Payload
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Detects Kaiten/Tsunami payload
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Kaiten family
Analysis: behavioral1
Detonation Overview
Submitted
2025-05-16 20:50
Reported
2025-05-16 20:52
Platform
debian9-mipsbe-20240729-en
Max time kernel
149s
Max time network
151s
Command Line
[/tmp/JaffaCakes118_05ce1925dfa6ded96fca92d4ac0c9d8a]
Signatures
N/A
Processes
/tmp/JaffaCakes118_05ce1925dfa6ded96fca92d4ac0c9d8a
[/tmp/JaffaCakes118_05ce1925dfa6ded96fca92d4ac0c9d8a]
Network
| Country | Destination | Domain | Proto |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp | |
| FR | 62.4.24.135:6667 | tcp |
Files
N/A