Overview

overview

10

Static

static

10

2640323170...kes118

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    26403231703f45be8c951adee6b8f30a_JaffaCakes118

  • Size

    139KB

  • Sample

    240704-z6qpkszblq

  • MD5

    26403231703f45be8c951adee6b8f30a

  • SHA1

    6bbbf7134fe1138d8b505fa6895d84518231c807

  • SHA256

    d2bb809a1ba19c3647dd9f2178ab2d07f69352b1b2969f435654fcb4100e7786

  • SHA512

    d83e8f8fb9bbaf5035e5df683757c66bc46bc6fd6520456150a5e57afdec4c8b25b83d4d9a86b5cabcec686f96d9ac675c038142872911504d336fc15fe93fcb

  • SSDEEP

    3072:Cv/WwsLgaq353qHiCOvhOpQqkDQHbeskmhxQwoVSUNu:KPLaq351hOpQqkLskmhxQwoVSUNu

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      26403231703f45be8c951adee6b8f30a_JaffaCakes118

    • Size

      139KB

    • MD5

      26403231703f45be8c951adee6b8f30a

    • SHA1

      6bbbf7134fe1138d8b505fa6895d84518231c807

    • SHA256

      d2bb809a1ba19c3647dd9f2178ab2d07f69352b1b2969f435654fcb4100e7786

    • SHA512

      d83e8f8fb9bbaf5035e5df683757c66bc46bc6fd6520456150a5e57afdec4c8b25b83d4d9a86b5cabcec686f96d9ac675c038142872911504d336fc15fe93fcb

    • SSDEEP

      3072:Cv/WwsLgaq353qHiCOvhOpQqkDQHbeskmhxQwoVSUNu:KPLaq351hOpQqkLskmhxQwoVSUNu

    Score
    7/10

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

1
T1562

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks