Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240226-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    30-03-2024 12:08

General

  • Target

    3b8d8c1b2b231a659268b6afb0175250_JaffaCakes118

  • Size

    21KB

  • MD5

    3b8d8c1b2b231a659268b6afb0175250

  • SHA1

    5d6a00b1a4c7be3dba26aabf09f8d7b5f7d0d1d9

  • SHA256

    eab11ee4b8d1f1bb87d4db40a4ffc0aa8a52ec3a84110d5cd07cf9b10a1b7a9c

  • SHA512

    34f5219f3a1e76d084f331d8e53ff079a9bf54e90aecaba77213c6fb4f701c3bb4a29f06e2da4576007e50dac3531a37e9908ed21481e60d9a6188b8fc86749a

  • SSDEEP

    384:Yamog4c6L5i4+stIW01vhQIE2TQKMpI8QwxZVFjfPnSbFMhymdGUop5hX4:YToh/DxCvhdR4IjWVFbSqs3UozJ4

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/3b8d8c1b2b231a659268b6afb0175250_JaffaCakes118
    /tmp/3b8d8c1b2b231a659268b6afb0175250_JaffaCakes118
    1⤵
      PID:654

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/654-1-0x00008000-0x0001bfb0-memory.dmp