General
-
Target
fb6dc629f3cea2f4968bf1dfb286276a_JaffaCakes118
-
Size
30KB
-
Sample
240419-3qc1bsae93
-
MD5
fb6dc629f3cea2f4968bf1dfb286276a
-
SHA1
6c8f03d87844af15df78fe1490683ee854dc320e
-
SHA256
f1edcebbddd718478622d047705e872ad26fa577f40f57c2dbfd902ea4bafeab
-
SHA512
59084359debf89dc0e00c5bcf143f7567854992a9f997e42874c4269ecea004d08fce7db1a74907a470107b4c61f3607edc7440fe51a1a04edecdd759e6c9fa0
-
SSDEEP
768:4VyvYLznDEB2iC+sDqC6NtxsPCekdob4dc1WokdX9JgGlzDpbuR1JY:4AYnnDEBI+smICekdoT1LOVJuq
Malware Config
Extracted
mirai
UNST
Targets
-
-
Target
fb6dc629f3cea2f4968bf1dfb286276a_JaffaCakes118
-
Size
30KB
-
MD5
fb6dc629f3cea2f4968bf1dfb286276a
-
SHA1
6c8f03d87844af15df78fe1490683ee854dc320e
-
SHA256
f1edcebbddd718478622d047705e872ad26fa577f40f57c2dbfd902ea4bafeab
-
SHA512
59084359debf89dc0e00c5bcf143f7567854992a9f997e42874c4269ecea004d08fce7db1a74907a470107b4c61f3607edc7440fe51a1a04edecdd759e6c9fa0
-
SSDEEP
768:4VyvYLznDEB2iC+sDqC6NtxsPCekdob4dc1WokdX9JgGlzDpbuR1JY:4AYnnDEBI+smICekdoT1LOVJuq
-
Contacts a large (19737) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates active TCP sockets
Gets active TCP sockets from /proc virtual filesystem.
-
Enumerates running processes
Discovers information about currently running processes on the system
-