Extracted

• • Target

    92fd77d89bfe7fe5c74a0f4d3246d965_JaffaCakes118

  • Size

    53KB

  • MD5

    92fd77d89bfe7fe5c74a0f4d3246d965

  • SHA1

    fe4a1a4216ec51d9000ca7e0d0ed0130aea529c2

  • SHA256

    9acdcb2268a5eb3e614b11b301b6c5cef11a4aca9b9d8442cf6e639e39c3516a

  • SHA512

    8c48d832169a4ee13891eafd214a1bb4d41c6902dc05a809d82c9a1b63d4870039d2f96cc2d1c49c6fb48dde2da6e28b3ca683a8e03b8cd2e163b2a9fe91d333

  • SSDEEP

    1536:5NItzSpjfnH2dCYsvTGZETYNLvh0hv4urEiBl:zsz2jfH2UYsKm0NLvhWBl

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Writes file to system bin folder

  behavioral1