General
-
Target
9b4cdf6a58246c2151b14dcbebefc00d_JaffaCakes118
-
Size
54KB
-
Sample
240610-twxr9atdjp
-
MD5
9b4cdf6a58246c2151b14dcbebefc00d
-
SHA1
d95cb8e0f8c7f21789cc396ef059c9bfe2495855
-
SHA256
a46eb94f7899c65eea4f5359dffdcdcf1e5d6266580c4baf0ceb07baedc725e1
-
SHA512
9a20d296c4315fe72cd9d315ec44b7bf9fe3d12d091bc64cc12e331d04af1b9db11d412b0b0eee4e1e721a7b1f1cb7e3c52fa22c451e58ce96550cd6b4ceccfc
-
SSDEEP
1536:36Ew7hWCbZ6OzptrGP85wXysWTF+7t+Rc:C1W4Z6OzP4NXysWp+7QK
Behavioral task
behavioral1
Sample
9b4cdf6a58246c2151b14dcbebefc00d_JaffaCakes118
Resource
ubuntu1804-amd64-20240508-en
Malware Config
Extracted
mirai
MIRAI
Targets
-
-
Target
9b4cdf6a58246c2151b14dcbebefc00d_JaffaCakes118
-
Size
54KB
-
MD5
9b4cdf6a58246c2151b14dcbebefc00d
-
SHA1
d95cb8e0f8c7f21789cc396ef059c9bfe2495855
-
SHA256
a46eb94f7899c65eea4f5359dffdcdcf1e5d6266580c4baf0ceb07baedc725e1
-
SHA512
9a20d296c4315fe72cd9d315ec44b7bf9fe3d12d091bc64cc12e331d04af1b9db11d412b0b0eee4e1e721a7b1f1cb7e3c52fa22c451e58ce96550cd6b4ceccfc
-
SSDEEP
1536:36Ew7hWCbZ6OzptrGP85wXysWTF+7t+Rc:C1W4Z6OzP4NXysWp+7QK
Score9/10-
Contacts a large (23997) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates active TCP sockets
Gets active TCP sockets from /proc virtual filesystem.
-
Enumerates running processes
Discovers information about currently running processes on the system
-