Overview

overview

3

Static

static

1

jaffacakes...4d.bin

debian-9-mips

3

Analysis

  • max time kernel
    119s
  • max time network
    115s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20260513-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    22/09/2026, 10:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    jaffacakes118_d919bcfcad21fdd57c3bbc3cf5d9604547c832295f4014228e7d250f25f8654d.bin
  • Size 5.5MB
  • Sample260922-l96cjsdf39
  • SHA256 d919bcfcad21fdd57c3bbc3cf5d9604547c832295f4014228e7d250f25f8654d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Enumerates kernel/hardware configuration 1 TTPs 19 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

    discovery
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/jaffacakes118_d919bcfcad21fdd57c3bbc3cf5d9604547c832295f4014228e7d250f25f8654d.bin
    /tmp/jaffacakes118_d919bcfcad21fdd57c3bbc3cf5d9604547c832295f4014228e7d250f25f8654d.bin
    1⤵
    • Enumerates kernel/hardware configuration
    PID:714
    • /tmp/jaffacakes118_d919bcfcad21fdd57c3bbc3cf5d9604547c832295f4014228e7d250f25f8654d.bin
      /tmp/jaffacakes118_d919bcfcad21fdd57c3bbc3cf5d9604547c832295f4014228e7d250f25f8654d.bin " "
      2⤵
      • Enumerates kernel/hardware configuration
      PID:721
      • /usr/sbin/update-rc.d
        update-rc.d dns-udp4 defaults
        3⤵
          PID:742
          • /usr/local/sbin/systemctl
            systemctl daemon-reload
            4⤵
              PID:748
            • /usr/local/bin/systemctl
              systemctl daemon-reload
              4⤵
                PID:748
              • /usr/sbin/systemctl
                systemctl daemon-reload
                4⤵
                  PID:748
                • /usr/bin/systemctl
                  systemctl daemon-reload
                  4⤵
                    PID:748
                  • /sbin/systemctl
                    systemctl daemon-reload
                    4⤵
                      PID:748
                    • /bin/systemctl
                      systemctl daemon-reload
                      4⤵
                      • Enumerates kernel/hardware configuration
                      • Reads runtime system information
                      PID:748
                  • /bin/mount
                    mount -o bind /tmp/ /proc/721
                    3⤵
                    • Reads runtime system information
                    PID:762
                  • /usr/sbin/service
                    service cron start
                    3⤵
                      PID:763
                      • /usr/bin/basename
                        basename /usr/sbin/service
                        4⤵
                          PID:764
                        • /usr/bin/basename
                          basename /usr/sbin/service
                          4⤵
                            PID:765
                          • /bin/systemctl
                            systemctl --quiet is-active multi-user.target
                            4⤵
                            • Enumerates kernel/hardware configuration
                            • Reads runtime system information
                            PID:766
                          • /bin/systemctl
                            systemctl list-unit-files --full "--type=socket"
                            4⤵
                            • Enumerates kernel/hardware configuration
                            • Reads runtime system information
                            PID:768
                          • /bin/sed
                            sed -ne "s/\\.socket\\s*[a-z]*\\s*\$/.socket/p"
                            4⤵
                              PID:769
                            • /bin/systemctl
                              systemctl -p Triggers show dbus.socket
                              4⤵
                              • Enumerates kernel/hardware configuration
                              • Reads runtime system information
                              PID:770
                            • /bin/systemctl
                              systemctl -p Triggers show ssh.socket
                              4⤵
                              • Enumerates kernel/hardware configuration
                              • Reads runtime system information
                              PID:771
                            • /bin/systemctl
                              systemctl -p Triggers show syslog.socket
                              4⤵
                              • Enumerates kernel/hardware configuration
                              • Reads runtime system information
                              PID:772
                            • /bin/systemctl
                              systemctl -p Triggers show systemd-fsckd.socket
                              4⤵
                              • Enumerates kernel/hardware configuration
                              • Reads runtime system information
                              PID:773
                            • /bin/systemctl
                              systemctl -p Triggers show systemd-initctl.socket
                              4⤵
                              • Enumerates kernel/hardware configuration
                              • Reads runtime system information
                              PID:774
                            • /bin/systemctl
                              systemctl -p Triggers show systemd-journald-audit.socket
                              4⤵
                              • Enumerates kernel/hardware configuration
                              • Reads runtime system information
                              PID:775
                            • /bin/systemctl
                              systemctl -p Triggers show systemd-journald-dev-log.socket
                              4⤵
                              • Enumerates kernel/hardware configuration
                              • Reads runtime system information
                              PID:776
                            • /bin/systemctl
                              systemctl -p Triggers show systemd-journald.socket
                              4⤵
                              • Enumerates kernel/hardware configuration
                              • Reads runtime system information
                              PID:777
                            • /bin/systemctl
                              systemctl -p Triggers show systemd-networkd.socket
                              4⤵
                              • Enumerates kernel/hardware configuration
                              • Reads runtime system information
                              PID:778
                            • /bin/systemctl
                              systemctl -p Triggers show systemd-rfkill.socket
                              4⤵
                              • Enumerates kernel/hardware configuration
                              • Reads runtime system information
                              PID:779
                            • /bin/systemctl
                              systemctl -p Triggers show systemd-udevd-control.socket
                              4⤵
                              • Enumerates kernel/hardware configuration
                              • Reads runtime system information
                              PID:780
                            • /bin/systemctl
                              systemctl -p Triggers show systemd-udevd-kernel.socket
                              4⤵
                              • Enumerates kernel/hardware configuration
                              • Reads runtime system information
                              PID:781
                          • /usr/local/sbin/systemctl
                            systemctl start cron.service
                            3⤵
                              PID:763
                            • /usr/local/bin/systemctl
                              systemctl start cron.service
                              3⤵
                                PID:763
                              • /usr/sbin/systemctl
                                systemctl start cron.service
                                3⤵
                                  PID:763
                                • /usr/bin/systemctl
                                  systemctl start cron.service
                                  3⤵
                                    PID:763
                                  • /sbin/systemctl
                                    systemctl start cron.service
                                    3⤵
                                      PID:763
                                    • /bin/systemctl
                                      systemctl start cron.service
                                      3⤵
                                      • Enumerates kernel/hardware configuration
                                      • Reads runtime system information
                                      PID:763
                                    • /bin/systemctl
                                      systemctl start crond.service
                                      3⤵
                                      • Enumerates kernel/hardware configuration
                                      • Reads runtime system information
                                      PID:782

                                Network

                                      MITRE ATT&CK Enterprise v16

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      .mod
                                      • Path /.mod
                                      • Size 27B
                                      • SHA256 503dffa20530956c5f61187e00935f20fe508c35dbb1fcf665b5d28d07d3d704
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      system.pub
                                      • Path /boot/system.pub
                                      • Size 5.5MB
                                      • SHA256 d919bcfcad21fdd57c3bbc3cf5d9604547c832295f4014228e7d250f25f8654d
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      .cfg
                                      • Path /etc/.cfg
                                      • Size 57B
                                      • SHA256 7e18da2137e9453fd98ed61aa79420a173383b2f7a5fe6538b70fbb560f9b3f6
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      .cfg
                                      • Path /etc/.cfg
                                      • Size 106B
                                      • SHA256 fa3391776ca767b0a333628ba23b36fdd9596bc5bc6f37361c80dd0e7fad0448
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      dns-udp4
                                      • Path /etc/init.d/dns-udp4
                                      • Size 159B
                                      • SHA256 a3f7d4499b03a14ff2de76122b6a61c221151f59daa6a63a78ae5a805c95a482
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      gateway.sh
                                      • Path /etc/profile.d/gateway.sh
                                      • Size 771B
                                      • SHA256 ddab58e945096e056199fb6a426302f202129c4015d5f1a5e2c4e8a3b83561f9
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download