Extracted

• • Target

    996c94fcc53ef956505523c087f769e2_JaffaCakes118

  • Size

    28KB

  • MD5

    996c94fcc53ef956505523c087f769e2

  • SHA1

    741f31c5b27403b6809c969861c0100483087c0f

  • SHA256

    06f958d4ef0bcaa8c89f9dbc5c42eaa3120dde934f3a2e498b91239ceecb9187

  • SHA512

    dfbed66baeaa11d6298e1d9509abd00676658d3f9527037a20c8fd2fa796f6177e7bd28c33a90258c836fdeb6554b14d3dc7f44108ba049c61e78e556a775064

  • SSDEEP

    768:9kH40U4nvRt/8YX/dmZRp1/e0AU6mucbGI98ea:M40U4nvT/tX/dmZRp8SJTG

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (81421) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1