Overview

overview

10

Static

static

10

397cccb686...kes118

debian-9-armhf

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    397cccb6865c09727ee5dcbf1a5ba119_JaffaCakes118

  • Size

    108KB

  • Sample

    240512-ltm62adc96

  • MD5

    397cccb6865c09727ee5dcbf1a5ba119

  • SHA1

    5c78262fba2743497dac0c038f1ca5f4b534474a

  • SHA256

    2f7f42c7510b4423c78e6d07177305f2527af8fe87d9d768d0e2f242a85a4fdc

  • SHA512

    c07b59ef0a5a77c08940c30c342be5074f5930de6f8b28e38433e2c7f6373e6289d14c8594518ae9e5683eb0dda28236b29f6344bffddf533740c0d95d3dcfde

  • SSDEEP

    1536:UFneJYriS+EaEo0tcGsGz+CX3PNSIVnbENlE4i497AGUs8KbMiEYOzw/9/8hekT9:Crx+mHVh+CX3PNSIV1C97nLbREJM/9yV

Score
10/10
mirailarrydiscovery

Malware Config

Extracted

Family

mirai

Botnet

LARRY

C2

cnc.junoland.xyz

scan.junoland.xyz

Targets

    • Target

      397cccb6865c09727ee5dcbf1a5ba119_JaffaCakes118

    • Size

      108KB

    • MD5

      397cccb6865c09727ee5dcbf1a5ba119

    • SHA1

      5c78262fba2743497dac0c038f1ca5f4b534474a

    • SHA256

      2f7f42c7510b4423c78e6d07177305f2527af8fe87d9d768d0e2f242a85a4fdc

    • SHA512

      c07b59ef0a5a77c08940c30c342be5074f5930de6f8b28e38433e2c7f6373e6289d14c8594518ae9e5683eb0dda28236b29f6344bffddf533740c0d95d3dcfde

    • SSDEEP

      1536:UFneJYriS+EaEo0tcGsGz+CX3PNSIVnbENlE4i497AGUs8KbMiEYOzw/9/8hekT9:Crx+mHVh+CX3PNSIV1C97nLbREJM/9yV

    Score
    9/10
    discovery

    • Contacts a large (204398) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks