Extracted

• • Target

    ef9cccb25705d5d14a99c5551b0f7bfc_JaffaCakes118

  • Size

    48KB

  • MD5

    ef9cccb25705d5d14a99c5551b0f7bfc

  • SHA1

    4cc4e905f1b3b6d58d730afa598ef2bd32b7aab0

  • SHA256

    f0e7ce904972b42d1258b7ceb263ab682e50344f550d124c8598c8fbb505d1c6

  • SHA512

    1c5bcbc90dfa6e0f3da22d17fd38b0854c2dcf44234c028441b7e63bdf460f90893577add3e7173615e2d2a52cda751cff76534ae38ce2db2dedec5746d811e3

  • SSDEEP

    768:m/GWOYeOg8HNVbBcbVWmgoGvqFaUAWerd6J9+zAMc/y:m2YeOgKNV9kVW7oaqFuWex6J9+sMc

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery
  behavioral1