General
- Target jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin
- Size 92KB
- Sample260930-pb7phatt7l
- SHA256 ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87
- MD5 ac04fa19fc9e628954c30648c5162054
- SHA1 2fe2b86fd774007f9264e252e85e6899001ae57e
- SHA512 030da1e8c44116d718f1d890102d8854bcfa823df84197af48b0eab15e986c7204ca24402f3b89e9f4d2e91ce3c132646d47f7810f35a3bd06e8df4c6b5ebf79
- SSDEEP 1536:YfX6EWzJywUwMJ9tXVUbGLPIkHT/pJhgZlXrGZhYja9Cfw+8:gXMJywUwMJ3XHP4trGl+8
- TLSH T17293DD65A7B1EEBBDC1DCD3306A84502108D594A56D92F6FBBB0C51CE78BD0E48E3C98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin
Resource
debian12-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin
- Size 92KB
- SHA256 ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87
- MD5 ac04fa19fc9e628954c30648c5162054
- SHA1 2fe2b86fd774007f9264e252e85e6899001ae57e
- SHA512 030da1e8c44116d718f1d890102d8854bcfa823df84197af48b0eab15e986c7204ca24402f3b89e9f4d2e91ce3c132646d47f7810f35a3bd06e8df4c6b5ebf79
- SSDEEP 1536:YfX6EWzJywUwMJ9tXVUbGLPIkHT/pJhgZlXrGZhYja9Cfw+8:gXMJywUwMJ3XHP4trGl+8
- TLSH T17293DD65A7B1EEBBDC1DCD3306A84502108D594A56D92F6FBBB0C51CE78BD0E48E3C98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.