Overview

overview

10

Static

static

10

3b580fa241...kes118

ubuntu-22.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b580fa241f0f73f885ad9b364bef5e7_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240729-hlecdaxeml

  • MD5

    3b580fa241f0f73f885ad9b364bef5e7

  • SHA1

    08534ff1a88547dd76c1948257ab7c78c2b7ab7e

  • SHA256

    6ebf51d169240f1c233aaf49da07005eca3529ae4c9b19b9de78f906ad7527a6

  • SHA512

    732b628b52e25eafc4f59b7372b8c9a258366b97d50385e64231a6616a61465581213ee02e9c3ac6284022e589e110dd3e3c16d9dd0572e64430bd9d5acb6477

  • SSDEEP

    24576:4vRE7caCfKGPqVEDNLFxKsfayI+gIGYuuCol7r:4vREKfPqVE5jKsfayRHGVo7r

Score
10/10
mrblackantivmbotnetlinuxpersistencetrojan

Malware Config

Targets

    • Target

      3b580fa241f0f73f885ad9b364bef5e7_JaffaCakes118

    • Size

      1.1MB

    • MD5

      3b580fa241f0f73f885ad9b364bef5e7

    • SHA1

      08534ff1a88547dd76c1948257ab7c78c2b7ab7e

    • SHA256

      6ebf51d169240f1c233aaf49da07005eca3529ae4c9b19b9de78f906ad7527a6

    • SHA512

      732b628b52e25eafc4f59b7372b8c9a258366b97d50385e64231a6616a61465581213ee02e9c3ac6284022e589e110dd3e3c16d9dd0572e64430bd9d5acb6477

    • SSDEEP

      24576:4vRE7caCfKGPqVEDNLFxKsfayI+gIGYuuCol7r:4vREKfPqVE5jKsfayRHGVo7r

    Score
    10/10
    mrblackantivmbotnetpersistencetrojan

    • MrBlack Trojan

      IoT botnet which infects routers to be used for DDoS attacks.

      trojanbotnetmrblack

    • MrBlack trojan

    • Executes dropped EXE

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

      persistence

    • Write file to user bin folder

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks