General
- Target jaffacakes118_d8e2d996cfd0e3320477ce024de20d403d588e5cd0167f5a1792541bef12942c.bin
- Size 134KB
- Sample260930-pbnxdsweng
- SHA256 d8e2d996cfd0e3320477ce024de20d403d588e5cd0167f5a1792541bef12942c
- MD5 151ed603620029b472136630eae7c740
- SHA1 ffe7ff52c5e822684ba2dea4a9fa3dc9964274ff
- SHA512 c6ebbd8fb96d21e52c238fea240bb0fb2868579a93418e86b781a06c04382c3f5569b545b88abf588a542772f8a71aee58add3556a1e0c7060d836b982fa670f
- SSDEEP 3072:S7dJVvSofwQB5pw1cKvRYIICGLHw+t7iZQ9M/9zl5f:S/ZSoIU5IcKvRYILGjiZqM/9zl5f
- TLSH T103D31A08FA50571BC2E127FBF68B028E33335B94B3DB73194A2856B43FC6B695D25605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_d8e2d996cfd0e3320477ce024de20d403d588e5cd0167f5a1792541bef12942c.bin
Resource
debian12-armhf-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_d8e2d996cfd0e3320477ce024de20d403d588e5cd0167f5a1792541bef12942c.bin
- Size 134KB
- SHA256 d8e2d996cfd0e3320477ce024de20d403d588e5cd0167f5a1792541bef12942c
- MD5 151ed603620029b472136630eae7c740
- SHA1 ffe7ff52c5e822684ba2dea4a9fa3dc9964274ff
- SHA512 c6ebbd8fb96d21e52c238fea240bb0fb2868579a93418e86b781a06c04382c3f5569b545b88abf588a542772f8a71aee58add3556a1e0c7060d836b982fa670f
- SSDEEP 3072:S7dJVvSofwQB5pw1cKvRYIICGLHw+t7iZQ9M/9zl5f:S/ZSoIU5IcKvRYILGjiZqM/9zl5f
- TLSH T103D31A08FA50571BC2E127FBF68B028E33335B94B3DB73194A2856B43FC6B695D25605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.