Overview

overview

10

Static

static

7

2c0889e6b9...kes118

ubuntu-18.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c0889e6b97473a3af446da79ebba3fa_JaffaCakes118

  • Size

    27KB

  • Sample

    240509-2fln2sac6s

  • MD5

    2c0889e6b97473a3af446da79ebba3fa

  • SHA1

    dbded3020e034f78fbcc44e130fdbf1e80d42ce8

  • SHA256

    6d14fc959d2fbcc9625587c804cc97af9e3bbe86afe90f99d6126c946041adf6

  • SHA512

    710d416a37510eef5535287a219261c4567241e01be18d9697097122b0682c56da56ee0179698ac17448bf82fed9737648ae9f1139d183e01676bf0f9d71ea9d

  • SSDEEP

    768:hpV1UeO2S/P4XMzF/X1Wy6JwCoifIl2kzjTN:hSeT0JXXrifIlnzjh

Score
10/10
mirailzrdbotnetdiscoverylinuxupx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      2c0889e6b97473a3af446da79ebba3fa_JaffaCakes118

    • Size

      27KB

    • MD5

      2c0889e6b97473a3af446da79ebba3fa

    • SHA1

      dbded3020e034f78fbcc44e130fdbf1e80d42ce8

    • SHA256

      6d14fc959d2fbcc9625587c804cc97af9e3bbe86afe90f99d6126c946041adf6

    • SHA512

      710d416a37510eef5535287a219261c4567241e01be18d9697097122b0682c56da56ee0179698ac17448bf82fed9737648ae9f1139d183e01676bf0f9d71ea9d

    • SSDEEP

      768:hpV1UeO2S/P4XMzF/X1Wy6JwCoifIl2kzjTN:hSeT0JXXrifIlnzjh

    Score
    10/10
    mirailzrdbotnetdiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Contacts a large (41365) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks