Overview

overview

10

Static

static

1

cf1a8ee0e7...kes118

debian-9-armhf

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cf1a8ee0e76289284b653b029d222fc7_JaffaCakes118

  • Size

    65KB

  • Sample

    240906-kasfzawfjb

  • MD5

    cf1a8ee0e76289284b653b029d222fc7

  • SHA1

    d67e9a566aab492c44e6f74d5abd7078cf5c4abb

  • SHA256

    668b2d390bfd51c43acd38e17ca46e79c406b3b1fd937bc8bfe7aa54b22d98e3

  • SHA512

    bac04d59463b6f000aa69983fbc3db287ec720de0ee34e92f4e5b1cd931d49721a0ca0ad6ddd0e8e6bdeabd8b02b37ef355949860a2a9292b5f24ce19ff275bf

  • SSDEEP

    1536:U33tiIM9976VkZ/JcZvy/oyH4jxPhMYYlis3:oiIm76V4BcZvAw5kB3

Score
10/10
miraibotnetdefense_evasiondiscovery

Malware Config

Targets

    • Target

      cf1a8ee0e76289284b653b029d222fc7_JaffaCakes118

    • Size

      65KB

    • MD5

      cf1a8ee0e76289284b653b029d222fc7

    • SHA1

      d67e9a566aab492c44e6f74d5abd7078cf5c4abb

    • SHA256

      668b2d390bfd51c43acd38e17ca46e79c406b3b1fd937bc8bfe7aa54b22d98e3

    • SHA512

      bac04d59463b6f000aa69983fbc3db287ec720de0ee34e92f4e5b1cd931d49721a0ca0ad6ddd0e8e6bdeabd8b02b37ef355949860a2a9292b5f24ce19ff275bf

    • SSDEEP

      1536:U33tiIM9976VkZ/JcZvy/oyH4jxPhMYYlis3:oiIm76V4BcZvAw5kB3

    Score
    10/10
    miraibotnetdefense_evasiondiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Contacts a large (71135) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

      discovery

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks