General
-
Target
f7907fd93577b22ba3be2f994e445c5eb196ebc474aa99e61d30a4a4c07dca16_JaffaCakes118
-
Size
152KB
-
Sample
240418-jmng4sfb89
-
MD5
baccfac095d7f93d6fb56f00e2542cf0
-
SHA1
375795450b95232a8fc8d318bac84cda24079624
-
SHA256
f7907fd93577b22ba3be2f994e445c5eb196ebc474aa99e61d30a4a4c07dca16
-
SHA512
0baf011f59e34511c36e587888d026d2088a19c432f327b7a2201a9ff5b7342d4e083c42cd17aaccad800c0a15180480cf18fe58be533d57d83499779af2cb5f
-
SSDEEP
3072:87J9bRaoVf6aWaKzNRDIRQHr7jr/ytxzM/9w44pN:87JzNl6aWaKzNRcRy3/ytZM/9y7
Behavioral task
behavioral1
Sample
f7907fd93577b22ba3be2f994e445c5eb196ebc474aa99e61d30a4a4c07dca16_JaffaCakes118
Resource
debian12-armhf-20240221-en
Malware Config
Extracted
mirai
MIRAI
cnc.catairlines.net
Targets
-
-
Target
f7907fd93577b22ba3be2f994e445c5eb196ebc474aa99e61d30a4a4c07dca16_JaffaCakes118
-
Size
152KB
-
MD5
baccfac095d7f93d6fb56f00e2542cf0
-
SHA1
375795450b95232a8fc8d318bac84cda24079624
-
SHA256
f7907fd93577b22ba3be2f994e445c5eb196ebc474aa99e61d30a4a4c07dca16
-
SHA512
0baf011f59e34511c36e587888d026d2088a19c432f327b7a2201a9ff5b7342d4e083c42cd17aaccad800c0a15180480cf18fe58be533d57d83499779af2cb5f
-
SSDEEP
3072:87J9bRaoVf6aWaKzNRDIRQHr7jr/ytxzM/9w44pN:87JzNl6aWaKzNRcRy3/ytZM/9y7
Score9/10-
Contacts a large (74720) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-