Extracted

• • Target

    ee2614aaba9772e6579bdb0c5c7df079_JaffaCakes118

  • Size

    29KB

  • MD5

    ee2614aaba9772e6579bdb0c5c7df079

  • SHA1

    1dcadfc18c77046c0c661bb33f8785f4a1f0fec3

  • SHA256

    e2e391f4988ae04161a9eb6ea4c2a80676e0ef794fb9bfdcfd5d4c1cac884e05

  • SHA512

    e480399890c112181f3ae66a34b66651a1fe99bfcf87732f16180fda370ef714d9d5e1e8f4cb9d842216da504ef13f377a6f6ba750d84486b038fa2ccb68ed34

  • SSDEEP

    768:oFoxdX+IoMKVUfzaP1urxIkB9NVy5KMQ2X5s3UozE:oF2+IoXVeNIY9NVyjEzE

  Score

  10^/10

  miraiunstbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (19899) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1