General

  • Target

    8e0ef96b5570895298cdcab3bd42f2a8_JaffaCakes118

  • Size

    47KB

  • Sample

    241103-3mj98swrbs

  • MD5

    8e0ef96b5570895298cdcab3bd42f2a8

  • SHA1

    81c873658d4025016c9a2b017bc6e726c25328f4

  • SHA256

    8ed86f3cdf9705fc8204724508d8fb838924219c86449d855bde799db9295756

  • SHA512

    8ab7c418c0874fd6e34254085d00cc222df10fdf178ae109308a20b2ae665d0996262d88347ccba3c34859204459498e4169e44f3fbc214b571390ea423491ca

  • SSDEEP

    768:ifPMvi1ZftXmDixq8G65aTNpVmYpb4hJQ0FNSL43W6iTYiQD9q3UELOeH03S0519:s15t0ysJTsJAhVtQCLJHx051fPc5e/SE

Malware Config

Extracted

Family

mirai

Botnet

JOSHO

Targets

    • Target

      8e0ef96b5570895298cdcab3bd42f2a8_JaffaCakes118

    • Size

      47KB

    • MD5

      8e0ef96b5570895298cdcab3bd42f2a8

    • SHA1

      81c873658d4025016c9a2b017bc6e726c25328f4

    • SHA256

      8ed86f3cdf9705fc8204724508d8fb838924219c86449d855bde799db9295756

    • SHA512

      8ab7c418c0874fd6e34254085d00cc222df10fdf178ae109308a20b2ae665d0996262d88347ccba3c34859204459498e4169e44f3fbc214b571390ea423491ca

    • SSDEEP

      768:ifPMvi1ZftXmDixq8G65aTNpVmYpb4hJQ0FNSL43W6iTYiQD9q3UELOeH03S0519:s15t0ysJTsJAhVtQCLJHx051fPc5e/SE

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks