General
-
Target
318836172f722942b7951a15e6902a22_JaffaCakes118
-
Size
54KB
-
Sample
240510-29b2psab82
-
MD5
318836172f722942b7951a15e6902a22
-
SHA1
d50ab015d68481bd34690cabea05b4a1c84cc114
-
SHA256
d6529a968dbf570cf211d43a8f7f353dc58d4bd33096f1b5ef97dd1e0cff578b
-
SHA512
5c07ea5b8c75bb073bffa0bf70e4e79a5602175fb637a336bbb1556ac44ada0e94b4603a962f4867efb63a4017fc81ced7bea5b5cc707d5acc65264d25e1729c
-
SSDEEP
1536:d6EwVWibZ6uzpNrmvFtWbFB2WCTZbt+xc:QVWYZ6uzv4FKFB2WoZbQq
Behavioral task
behavioral1
Sample
318836172f722942b7951a15e6902a22_JaffaCakes118
Resource
ubuntu2004-amd64-20240508-en
Malware Config
Extracted
mirai
MIRAI
Targets
-
-
Target
318836172f722942b7951a15e6902a22_JaffaCakes118
-
Size
54KB
-
MD5
318836172f722942b7951a15e6902a22
-
SHA1
d50ab015d68481bd34690cabea05b4a1c84cc114
-
SHA256
d6529a968dbf570cf211d43a8f7f353dc58d4bd33096f1b5ef97dd1e0cff578b
-
SHA512
5c07ea5b8c75bb073bffa0bf70e4e79a5602175fb637a336bbb1556ac44ada0e94b4603a962f4867efb63a4017fc81ced7bea5b5cc707d5acc65264d25e1729c
-
SSDEEP
1536:d6EwVWibZ6uzpNrmvFtWbFB2WCTZbt+xc:QVWYZ6uzv4FKFB2WoZbQq
Score9/10-
Contacts a large (7355) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Enumerates active TCP sockets
Gets active TCP sockets from /proc virtual filesystem.
-