Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    19-12-2024 02:12

General

  • Target

    fe072aa149e77eb3adae2a8d86ce528f_JaffaCakes118

  • Size

    33KB

  • MD5

    fe072aa149e77eb3adae2a8d86ce528f

  • SHA1

    078f73c831f440587388dd6462335df2c394a8a0

  • SHA256

    10ef231429561bea4e23d25c854e4143123aa17aec7e755b477b42cc50782182

  • SHA512

    8b8443b624db9d51114a9d6202b1181f85a31c80b610ed97b7a51538a05b74badee5ceeef2a42bb9a5be6367a212c1d0ad20a331ab891c1e9eb3e1f08b72204f

  • SSDEEP

    768:9Dc63S4P/SJNJ2+wueWlEvJjPj1rmSCBe+o5kLMDdC9q3UEL5C:5c1jJcWlkmSCBLLMDNLQ

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/fe072aa149e77eb3adae2a8d86ce528f_JaffaCakes118
    /tmp/fe072aa149e77eb3adae2a8d86ce528f_JaffaCakes118
    1⤵
    • Reads runtime system information
    PID:649

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads