Analysis
- max time kernel
152s - max time network
159s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
30/09/2026, 12:10
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin
Resource
debian12-mipsel-20260513-en
debian-12-mipsel
4 signatures
150 seconds
General
- Target jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin
- Size 92KB
- Sample260930-pb7phatt7l
- SHA256 ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87
- MD5 ac04fa19fc9e628954c30648c5162054
- SHA1 2fe2b86fd774007f9264e252e85e6899001ae57e
- SHA512 030da1e8c44116d718f1d890102d8854bcfa823df84197af48b0eab15e986c7204ca24402f3b89e9f4d2e91ce3c132646d47f7810f35a3bd06e8df4c6b5ebf79
- SSDEEP 1536:YfX6EWzJywUwMJ9tXVUbGLPIkHT/pJhgZlXrGZhYja9Cfw+8:gXMJywUwMJ3XHP4trGl+8
- TLSH T17293DD65A7B1EEBBDC1DCD3306A84502108D594A56D92F6FBBB0C51CE78BD0E48E3C98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 797 jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin - Enumerates running processes
Discovers information about currently running processes on the system
- Reads process memory 1 TTPs 64 IoCs
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.
description ioc Process File opened for reading /proc/971/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/862/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/888/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/898/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/951/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/996/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/882/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/942/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/966/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/975/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/423/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/704/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/817/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/883/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/907/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/915/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/986/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/876/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/939/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/972/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/998/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/389/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/838/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/844/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/935/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/962/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/766/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/873/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/894/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/949/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/794/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/834/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/941/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/947/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/959/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/963/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/969/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/991/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/379/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/761/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/869/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/872/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/908/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/929/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/948/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/955/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/332/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/857/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/906/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/944/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/980/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/982/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/810/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/923/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/931/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/377/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/806/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/815/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/851/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/899/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/914/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/932/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/945/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/856/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin -
description ioc Process File opened for reading /proc/1102/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1143/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1149/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1160/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1166/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/180/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/204/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/970/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1137/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/353/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/940/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1021/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1040/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1041/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1127/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1131/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1016/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1090/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1146/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/930/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/933/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1002/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1081/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1082/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1094/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/946/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/975/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1072/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1125/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/959/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1000/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/897/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1013/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1049/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1121/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1168/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/989/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1009/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/377/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/977/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/770/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1100/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1158/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/883/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1010/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/875/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/894/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1036/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1048/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1102/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/882/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1030/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1052/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1122/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1055/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1076/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1128/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1171/maps jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/794/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/929/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/960/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1003/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1074/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin File opened for reading /proc/1108/cmdline jaffacakes118_ae6c22d5da92b3bee95804ead0e138fbda7b2763391fd0b85534e928277c6c87.bin