Extracted

• • Target

    JaffaCakes118_d7596e4f7533eab504a8a81ca4d913e7

  • Size

    58KB

  • MD5

    d7596e4f7533eab504a8a81ca4d913e7

  • SHA1

    88ba8952e1ebe94a2119b50233b8f73660255ace

  • SHA256

    ef98f8e3f7a40f90b07512eb4207a8f132483918b92c4e64e5df214680dffac2

  • SHA512

    e65ff8e620f8a03529243f7b599817e314d5305bf3d0c12d50dadf3a5183def0ef6a6ac8b9bd380c540923caabff14c3be38891c1e9b1254a2445eb271b80f92

  • SSDEEP

    1536:ly2ZHTO1iwmkCG18p4V10cGSOkGirR9IM3/csZze/6:o2ZHTTUBrBQO0s0/6

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (198126) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1