Overview

overview

10

Static

static

7

1ec0605508...kes118

ubuntu-20.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ec06055089732fea67930af74be2c95_JaffaCakes118

  • Size

    23KB

  • Sample

    240329-lrcyaafa45

  • MD5

    1ec06055089732fea67930af74be2c95

  • SHA1

    367da13e501e81fd72fe4718201f39f66944f9d5

  • SHA256

    35aced3ec7331040d8bda1c7833ddc3f3f233f56fa9950179a6382485601d158

  • SHA512

    519ba6f84326eb14947122b431bf29f1651ec19a57c0c782696a80b3e331da4ba469082c40e1b41e4808d3edc8556afdf65e2ecb8153b8850e6420e9a7f074ed

  • SSDEEP

    384:MB5xGQrRp43lWzaxIemvHsbjvEaJ61IlyMUq6AHz0j+kQy+hqUKK6ZA3d6nmf1TG:a5xnC4axIDGb5AIlJrOj+kgIA3d6nDv

Score
10/10
miraisorabotnetlinuxupx

Malware Config

Extracted

Family

mirai

Botnet

SORA

Targets

    • Target

      1ec06055089732fea67930af74be2c95_JaffaCakes118

    • Size

      23KB

    • MD5

      1ec06055089732fea67930af74be2c95

    • SHA1

      367da13e501e81fd72fe4718201f39f66944f9d5

    • SHA256

      35aced3ec7331040d8bda1c7833ddc3f3f233f56fa9950179a6382485601d158

    • SHA512

      519ba6f84326eb14947122b431bf29f1651ec19a57c0c782696a80b3e331da4ba469082c40e1b41e4808d3edc8556afdf65e2ecb8153b8850e6420e9a7f074ed

    • SSDEEP

      384:MB5xGQrRp43lWzaxIemvHsbjvEaJ61IlyMUq6AHz0j+kQy+hqUKK6ZA3d6nmf1TG:a5xnC4axIDGb5AIlJrOj+kgIA3d6nDv

    Score
    10/10
    miraisorabotnet

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Impair Defenses

1
T1562

Hijack Execution Flow

1
T1574

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks