Overview

overview

10

Static

static

10

27201c2352...kes118

ubuntu-22.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27201c2352dc520fea6cd5d52680cb62_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240728-14f8sssbjc

  • MD5

    27201c2352dc520fea6cd5d52680cb62

  • SHA1

    7a8b40a3750419a2dfa0e86b9dc9f42cace11ebd

  • SHA256

    913b27ed6c2bb0f654cfbc8d8dadbf3b187ca4916a56d6397808f1582b826ef4

  • SHA512

    256688e4ed7aa985b5e868773add6bba2a09ec5cfa883a02287cbd5865b041bc2a984e1b3fd43f81148fb0a89144dc3cfa5969fc3b7da169d28085903586eb5a

  • SSDEEP

    49152:2nilOolLbt1laIunbZsehknS55555555555555555555555555555555555k55w1:yeOolLbt1laIunlsehHNtYi7COEm

Score
10/10
mrblackantivmbotnetlinuxpersistencetrojan

Malware Config

Targets

    • Target

      27201c2352dc520fea6cd5d52680cb62_JaffaCakes118

    • Size

      1.5MB

    • MD5

      27201c2352dc520fea6cd5d52680cb62

    • SHA1

      7a8b40a3750419a2dfa0e86b9dc9f42cace11ebd

    • SHA256

      913b27ed6c2bb0f654cfbc8d8dadbf3b187ca4916a56d6397808f1582b826ef4

    • SHA512

      256688e4ed7aa985b5e868773add6bba2a09ec5cfa883a02287cbd5865b041bc2a984e1b3fd43f81148fb0a89144dc3cfa5969fc3b7da169d28085903586eb5a

    • SSDEEP

      49152:2nilOolLbt1laIunbZsehknS55555555555555555555555555555555555k55w1:yeOolLbt1laIunlsehHNtYi7COEm

    Score
    10/10
    mrblackantivmbotnetpersistencetrojan

    • MrBlack Trojan

      IoT botnet which infects routers to be used for DDoS attacks.

      trojanbotnetmrblack

    • MrBlack trojan

    • Executes dropped EXE

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

      persistence

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Write file to user bin folder

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks