Extracted

• • Target

    JaffaCakes118_67e1aabd9d8fd2207ad702b0f84f2398

  • Size

    54KB

  • MD5

    67e1aabd9d8fd2207ad702b0f84f2398

  • SHA1

    6e879e389b49d9566c52838265e5038035bd3783

  • SHA256

    c21b0cc721eaf2bac3c47928ade4d0d259eae5aa3b6b9d6930c45e10e0945e7c

  • SHA512

    a75a9928823081e036858c897b35cc6c87d13dae72cbb8f371bcaf8b5aa02f34a5f07edf37c8391367c3abb25ea299abaaf2cfac1af8674789fd7481250110d0

  • SSDEEP

    768:TzIwKyfLOGVEY9yMV9kaUsna4dc0qPvwmD0nq3UIp2tD22uc4qo73jQMNPjXp56:TEl+9kaza4dwPvND9pm6qofQuL6

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (148491) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1