Analysis Overview
SHA256
833f944e82b4d95d95f42c82e6fa01ea1f635b753338d8f88fcf1e8a9f6ae1df
Threat Level: Known bad
The file 41445aa60caae0ce06989005d2158f82_JaffaCakes118 was found to be: Known bad.
Malicious Activity Summary
Mirai
UPX packed file
Reads runtime system information
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2024-10-13 17:54
Signatures
UPX packed file
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2024-10-13 17:54
Reported
2024-10-13 17:56
Platform
debian9-armhf-20240729-en
Max time kernel
0s
Command Line
Signatures
Mirai
Reads runtime system information
| Description | Indicator | Process | Target |
| File opened for reading | /proc/self/exe | /tmp/41445aa60caae0ce06989005d2158f82_JaffaCakes118 | N/A |
Processes
/tmp/41445aa60caae0ce06989005d2158f82_JaffaCakes118
[/tmp/41445aa60caae0ce06989005d2158f82_JaffaCakes118]
/bin/sh
[/bin/sh -c iptables -A INPUT -p tcp --destination-port 23 -j DROP]
/sbin/iptables
[iptables -A INPUT -p tcp --destination-port 23 -j DROP]
/bin/sh
[/bin/sh -c iptables -A INPUT -p tcp --destination-port 37215 -j DROP]
/sbin/iptables
[iptables -A INPUT -p tcp --destination-port 37215 -j DROP]
Network
Files
memory/646-1-0x00008000-0x000326e8-memory.dmp