General
- Target jaffacakes118_3fe3eff8548b8df9fef6f55a03ce07483747ba0c06aff4a319034d27c55e1be5.bin
- Size 22KB
- Sample260910-vjrwxavybw
- SHA256 3fe3eff8548b8df9fef6f55a03ce07483747ba0c06aff4a319034d27c55e1be5
- MD5 cf6ceb888d41809e6b2648df2e1ad112
- SHA1 ec5d7b6fff80ac3e42d80f42dc0d06647dffe2e0
- SHA512 1fd1189a87be32a1f98dee0bd7ff2fb71089870ede5e227cc37873d1a967bb2380da85bb37c38f08b35dcb4c8b509af3454dfd0126bf577a0e4d7de05789fc53
- SSDEEP 384:lens7Dv4ens7Vens7D14ens7Vens7Dg4ens7Vens7Dy4ens7Vens7D/4ens7J:les7z4es7Ves7p4es7Ves784es7Ves7w
- TLSH T10EA25117605ACC3724EDCC4EB352912E9267849F886B1FF0FC6DB93C891A05C721ADE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_3fe3eff8548b8df9fef6f55a03ce07483747ba0c06aff4a319034d27c55e1be5.bin
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
jaffacakes118_3fe3eff8548b8df9fef6f55a03ce07483747ba0c06aff4a319034d27c55e1be5.bin
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
jaffacakes118_3fe3eff8548b8df9fef6f55a03ce07483747ba0c06aff4a319034d27c55e1be5.bin
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
jaffacakes118_3fe3eff8548b8df9fef6f55a03ce07483747ba0c06aff4a319034d27c55e1be5.bin
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target jaffacakes118_3fe3eff8548b8df9fef6f55a03ce07483747ba0c06aff4a319034d27c55e1be5.bin
- Size 22KB
- SHA256 3fe3eff8548b8df9fef6f55a03ce07483747ba0c06aff4a319034d27c55e1be5
- MD5 cf6ceb888d41809e6b2648df2e1ad112
- SHA1 ec5d7b6fff80ac3e42d80f42dc0d06647dffe2e0
- SHA512 1fd1189a87be32a1f98dee0bd7ff2fb71089870ede5e227cc37873d1a967bb2380da85bb37c38f08b35dcb4c8b509af3454dfd0126bf577a0e4d7de05789fc53
- SSDEEP 384:lens7Dv4ens7Vens7D14ens7Vens7Dg4ens7Vens7Dy4ens7Vens7D/4ens7J:les7z4es7Ves7p4es7Ves784es7Ves7w
- TLSH T10EA25117605ACC3724EDCC4EB352912E9267849F886B1FF0FC6DB93C891A05C721ADE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1