General
-
Target
1fb9894f8ab83cb681935349f453b204_JaffaCakes118
-
Size
151KB
-
Sample
240329-mlqgvsfg62
-
MD5
1fb9894f8ab83cb681935349f453b204
-
SHA1
485585dec80038713cca06cfc4ac8bcace0655f8
-
SHA256
76a7fc5b00f8cd5825180930a8a274df6b93f9e75aa593afa765218e6df25770
-
SHA512
8005aaf32bde12a96bf8dd1c8dcd1e36cfaebb8075a0bd00837b0841fcdf688a9d35eabbf04c6d6f755857a287e971f85cbd70372b170ebcc1b29f9596ccc2e4
-
SSDEEP
3072:JW6dm9tS1aRGQdK76t/zChI5mrThPaLEnvPrNb:c6IG+LCGmrThPaLEnvPrNb
Behavioral task
behavioral1
Sample
1fb9894f8ab83cb681935349f453b204_JaffaCakes118
Resource
debian9-mipsbe-20240226-en
Malware Config
Targets
-
-
Target
1fb9894f8ab83cb681935349f453b204_JaffaCakes118
-
Size
151KB
-
MD5
1fb9894f8ab83cb681935349f453b204
-
SHA1
485585dec80038713cca06cfc4ac8bcace0655f8
-
SHA256
76a7fc5b00f8cd5825180930a8a274df6b93f9e75aa593afa765218e6df25770
-
SHA512
8005aaf32bde12a96bf8dd1c8dcd1e36cfaebb8075a0bd00837b0841fcdf688a9d35eabbf04c6d6f755857a287e971f85cbd70372b170ebcc1b29f9596ccc2e4
-
SSDEEP
3072:JW6dm9tS1aRGQdK76t/zChI5mrThPaLEnvPrNb:c6IG+LCGmrThPaLEnvPrNb
Score7/10-
Changes its process name
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-