Overview

overview

10

Static

static

7

f30fef2d70...kes118

debian-9-armhf

10

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240226-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    16-04-2024 08:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f30fef2d7003bc0a3661f680afeef1c5_JaffaCakes118

  • Size

    57KB

  • MD5

    f30fef2d7003bc0a3661f680afeef1c5

  • SHA1

    9c708ad9ed52345363769fa6d9b1076674ff0d54

  • SHA256

    ecb045e46b2491d1200f5da8762a753893e1bf7fe5f9f142f2e28677e6f56421

  • SHA512

    8d1bb2daa4a64b893d31c97182fc10d5f6f8159d8f4bd0de20a7f2e591760aa27b101a8f97dc4aa2b74695eacf98b6338fa1b23db584e72620425f018539f1c4

  • SSDEEP

    1536:R/LeCj1hQg0vyidOz1Fd+WEEqmqlEHXKO3Lio/xisAGBD7:BLeS1hQgAyy4zd+WXqfEH6O3LiKks1D7

Score
10/10
miraisorabotnet

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/f30fef2d7003bc0a3661f680afeef1c5_JaffaCakes118
    /tmp/f30fef2d7003bc0a3661f680afeef1c5_JaffaCakes118
    1⤵
    • Reads runtime system information
    PID:670

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/670-1-0x00008000-0x0002ce40-memory.dmp
    Download