Extracted

• • Target

    ba9a8fd1b62b9d87224d171c2e3be0fd_JaffaCakes118

  • Size

    77KB

  • MD5

    ba9a8fd1b62b9d87224d171c2e3be0fd

  • SHA1

    489e7e3600ee60348849f8922a8e428f117aee7e

  • SHA256

    26e626872e082d2c3f713889e1c2dbbe077843d977950cc12ba8658f5ee0e33a

  • SHA512

    d7b5e6cf3fa4895ef90d0e60e3f2c8a095b7e2504202458a8caf348661e397ba1d3b71b4520e5fb816f12e7a9a4a95e06de4601140b3d5f2dc8eae248b945ce2

  • SSDEEP

    1536:J4gZLUay6+vl/Q15k9YrE9x5EZYg0TWNJ7DWTGmjJv09:Wmry6+vd2k9YrEsDJ7DWTGkJ89

  Score

  7^/10

  • Deletes itself

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

  behavioral1