Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    08/12/2024, 00:40

General

  • Target

    d4699dfd3ae367e13e309037d3a1d736_JaffaCakes118

  • Size

    21KB

  • MD5

    d4699dfd3ae367e13e309037d3a1d736

  • SHA1

    75c0de859ba0602df604b11565e011cbad41959d

  • SHA256

    080e9597f13d3365bb08656157e2be2404fd1f47f360e35cecbd71a5981d175d

  • SHA512

    2c84924ca82daf099b44ea9b281cf77f6e89c28606aa5c647ff7059ea24dbc67cf0ee0f4735d80a1f02de520c25bb79988f50678896de10bb7b9686fe053fa04

  • SSDEEP

    384:Yzmog4c6L5i4+stIW01vhQIE2TQPTvq5bhuH77BLdcZGquyhymdGUop5hXB:YKoh/DxCvhdRaq5Yb7BLdcRuys3UozJB

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/d4699dfd3ae367e13e309037d3a1d736_JaffaCakes118
    /tmp/d4699dfd3ae367e13e309037d3a1d736_JaffaCakes118
    1⤵
      PID:668

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads