Extracted

• • Target

    d01088553dc831a32cb87560699dfea9_JaffaCakes118

  • Size

    54KB

  • MD5

    d01088553dc831a32cb87560699dfea9

  • SHA1

    df380f631f615629ba6da1f8c03b8206304be6e8

  • SHA256

    3200bed503d2986aa0c35eb8c8bd832c0737f0aeaeb6cb632965e1d2de8b3642

  • SHA512

    319e17c5b9751c95ecf375ac2dd10757210ef20f61fccf959e6f284a2d11f62f0c0e76e0cc6aa29f473939049e8fb9b751a78885de6efa997acf3891761ffadf

  • SSDEEP

    1536:J5SuOOTO910c7fd0uXf2WbPNqLNGiFnHcK:J5Lnhc71ruwqciNcK

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (101107) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1