Extracted

• • Target

    ed72ba084d68d943d62caa99d0536be5_JaffaCakes118

  • Size

    54KB

  • MD5

    ed72ba084d68d943d62caa99d0536be5

  • SHA1

    844aa461c5b4c6c68fca73aa640db09d7a96bf77

  • SHA256

    dff8ae36adc8ade6bf07d47bfe10182189054a7f6203b98359d38f69f34b2fd7

  • SHA512

    3d54380282f8e2bd170a553b675c28064eb5c32505ca667e9f89c69170476cd3c18cc347dec848c02e8fe352082263698a611c8e7a3c7a22367a5a4a2295129d

  • SSDEEP

    768:z6JthbDVhwtQJAYNW4UxfnWSfJRFa6cjatYGnZbrUR2iq26e+WcmiVq3UIRWcsz6:sPiQiYYxvW4/FmjaV1b3eh+ZOGgRluw

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (102826) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1