Extracted

• • Target

    c48ffdf2cb181ffc8af779e3d2a28cc8_JaffaCakes118

  • Size

    54KB

  • MD5

    c48ffdf2cb181ffc8af779e3d2a28cc8

  • SHA1

    a86432d84ea65ba9d3a5f89564bfd287e0bda8cc

  • SHA256

    8b83cf1f72c6017adb54b353998f9c2f0635321c83a9861bb04bfeabfded1191

  • SHA512

    c319e65112ee8aeaade8cd2910c0398c958917c04caf645beefa1f793e978741a9b7ae7adb685ea7578b87dc1ecb3eff71b953147c91261152d51b6e013be886

  • SSDEEP

    768:Zd67havvYM840jQt+JcLpXFCFcj3pWSRxsevqUq3UIuRam+jvxtPjra2aGbjGeiN:3Qhs2mp1CCMSRmIq7I+jJti2bjGeiN

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (362579) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1