Overview

overview

10

Static

static

10

80d0cac0cd...kes118

ubuntu-22.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    80d0cac0cd6be8010819fdcd7ac4af46_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240801-rqj8vsvcmm

  • MD5

    80d0cac0cd6be8010819fdcd7ac4af46

  • SHA1

    adb2208a2016c6686c52d440f518098b4cbe3846

  • SHA256

    ca22002822b27562971b1b12bfd61f2f670554ebdb0907270fda4a65f7fd2eed

  • SHA512

    d0f1da32dd1f70ce3f918230c39c3d7a6210998f0a3ea0262805611156e3d37e8af237d14e3bf19eba0d7ea5b154621880fe3eadaea87bfc6e6337c6a5294a48

  • SSDEEP

    24576:e845rGHu6gVJKG75oFpA0VWeX4y2y1q2rJp0:745vRVJKGtSA0VWeoBu9p0

Score
10/10
mrblackantivmbotnetlinuxpersistencetrojan

Malware Config

Targets

    • Target

      80d0cac0cd6be8010819fdcd7ac4af46_JaffaCakes118

    • Size

      1.2MB

    • MD5

      80d0cac0cd6be8010819fdcd7ac4af46

    • SHA1

      adb2208a2016c6686c52d440f518098b4cbe3846

    • SHA256

      ca22002822b27562971b1b12bfd61f2f670554ebdb0907270fda4a65f7fd2eed

    • SHA512

      d0f1da32dd1f70ce3f918230c39c3d7a6210998f0a3ea0262805611156e3d37e8af237d14e3bf19eba0d7ea5b154621880fe3eadaea87bfc6e6337c6a5294a48

    • SSDEEP

      24576:e845rGHu6gVJKG75oFpA0VWeX4y2y1q2rJp0:745vRVJKGtSA0VWeoBu9p0

    Score
    10/10
    mrblackantivmbotnetpersistencetrojan

    • MrBlack Trojan

      IoT botnet which infects routers to be used for DDoS attacks.

      trojanbotnetmrblack

    • MrBlack trojan

    • Executes dropped EXE

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

      persistence

    • Write file to user bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks