Extracted

• • Target

    9c07e10744de1fa22bb3847905112bf6_JaffaCakes118

  • Size

    51KB

  • MD5

    9c07e10744de1fa22bb3847905112bf6

  • SHA1

    08a2ab5485f687d8cf2156624ea55422a995adf7

  • SHA256

    ab7e7d7cd192b928a8885efcfcd8ed4c1867796df034f857d335f5f6eaafcefc

  • SHA512

    28fdd8512dc3974b0e0fcb0c6c635983c29a6bdce151176d761be0e400608789565426d117c381bf8d25cd7f4c6a32661a1a4a016ddb702b8709612ccedd8c19

  • SSDEEP

    1536:2Urk9GjyOkc3rVLbq2TFGNftzLoYjpL5FBKeAgFy:2Ek9Y6mnq2BuFzLoOL1An

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (20283) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1