Analysis

  • max time kernel
    0s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240226-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    11-04-2024 04:27

General

  • Target

    ecab26b2b7826c67844ff62a9a2f7ea9_JaffaCakes118

  • Size

    25KB

  • MD5

    ecab26b2b7826c67844ff62a9a2f7ea9

  • SHA1

    47b5c02fb7f51e5a38e55c6545c3b34e78bb8c43

  • SHA256

    af60ce8d26e6f99bcfa789bb2466753d216275ede8172fe9c264689f49efb3a4

  • SHA512

    390a384ae5e0a81d079829bfe1cf9f4aa2ad4a16e88ff24656d90e7f94f0cabe1b62978325c750bf9758ac6e54f8bde6867a9aea57dbaecf0869fd887f161647

  • SSDEEP

    768:P8kbmEOt3oOmSQxJUdvwte/C/JgGlzDpbuR1Jr:UkbmEOt49SiCdoisVJu9

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/ecab26b2b7826c67844ff62a9a2f7ea9_JaffaCakes118
    /tmp/ecab26b2b7826c67844ff62a9a2f7ea9_JaffaCakes118
    1⤵
      PID:708

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/708-1-0x00400000-0x004518c0-memory.dmp