General
- Target jaffacakes118_82bfbe24e499275a8209331fba768812091efc7278300c072b332317f3806f32.bin
- Size 53KB
- Sample260930-pbt4eawere
- SHA256 82bfbe24e499275a8209331fba768812091efc7278300c072b332317f3806f32
- MD5 e3318e75b16d8c42121a45f8d5077f41
- SHA1 0da0fd0865c616ab7573f6f36ebe74b363d19c54
- SHA512 56e9f2559425715eb5b4b45cb1d7b9dcc8791d9eeff11a9099fe97e104e020fb08c4fd9527db3428b1fb93aed049bc705b5ff3c9064dd171a897512aa17f01ef
- SSDEEP 1536:IOEfisOsv9soj+fpxZWwTYaRs1htfPCIUYw8sk0:Qfiov9Nj+fWIKfPsYw84
- TLSH T122332A172661C0ADC416C1B0B6E7E2A7E831713C62F5F46C33D2BF29AEB95680D5A317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_82bfbe24e499275a8209331fba768812091efc7278300c072b332317f3806f32.bin
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_82bfbe24e499275a8209331fba768812091efc7278300c072b332317f3806f32.bin
- Size 53KB
- SHA256 82bfbe24e499275a8209331fba768812091efc7278300c072b332317f3806f32
- MD5 e3318e75b16d8c42121a45f8d5077f41
- SHA1 0da0fd0865c616ab7573f6f36ebe74b363d19c54
- SHA512 56e9f2559425715eb5b4b45cb1d7b9dcc8791d9eeff11a9099fe97e104e020fb08c4fd9527db3428b1fb93aed049bc705b5ff3c9064dd171a897512aa17f01ef
- SSDEEP 1536:IOEfisOsv9soj+fpxZWwTYaRs1htfPCIUYw8sk0:Qfiov9Nj+fWIKfPsYw84
- TLSH T122332A172661C0ADC416C1B0B6E7E2A7E831713C62F5F46C33D2BF29AEB95680D5A317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.