Extracted

• • Target
    1848edff393fc08766861c05d2f9ab23_JaffaCakes118
  • Size 64KB
  • SHA256 7d8e529c1e4f5baff8aa42a40fc088411006ae81c4d75ed60ddfc16cf5b1166e
  • MD5 1848edff393fc08766861c05d2f9ab23
  • SHA1 9c85ddf716868cf0db3bc63a891b8aced2a48125
  • SHA512 b44cb6bda363490f2481d0dd819cc0302c5eb340c998a1713a0092ac62396c3499545b28aa3874f6dbaa9f1d90995b4b7ab45998f310bc61e351d43b5424960e
  • SSDEEP 1536:+rl46QWtBrYQPNseLL337hiloH6WSWuX/MMOCs2qg6U4e:G46QWtBrYQPNsef9im/SWs/dOC3qR9e
  • MD5 SHA1 SHA512 SSDEEP

  Score

  9^/10

  discovery

  • Contacts a large (20307) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1