Extracted

• • Target

    609c1238af802ede246b1bb55d355dc5_JaffaCakes118

  • Size

    52KB

  • MD5

    609c1238af802ede246b1bb55d355dc5

  • SHA1

    74f2ced35a758f572e1c070e438d2056cdb16acc

  • SHA256

    64adef1e782de63ce018d9dfb619f1c98c1bc4ec67380b9b1a4d7cb929977e40

  • SHA512

    2c8555de4477cce4f1b84a5813ce0c727e04bac3a2472fd1e2b0944bee4c2653ef63c3ba7e1a2f233073ed3f0bd31f7f9ea83b0363b1a0d361bb63e6e711d54d

  • SSDEEP

    1536:Yo2kkuHsKrYyn+rOXxt2oNuL6eAvFR4pH:/S2Bakz5uLkuN

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (81635) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1