Extracted

• • Target

    3448066.bin

  • Size

    5.0MB

  • MD5

    b7eb8e66f765a5c0a8d0ddf3ff763c3e

  • SHA1

    e89f22db7c6295ef3a18ae316066e23f857c1f2b

  • SHA256

    b8194ca3dd994e7e7a699328b57613c848c6a5704d4ffac44c94c2612c8c4d8e

  • SHA512

    cd4282de026e45a42fbc7c209d23dc4e75e3cfbbbf97accdff49c84686aa86bfb51524d69640c7a667985c3c0f0b7d02f39f943ba99c3fd4d0b1fdfa35cbe3b9

  • SSDEEP

    49152:Dx+8QIc65Q5pjPhDWact/rzwS0sELVI1:Dxd5c6k5D/

  Score

  10^/10

  kaijidefense_evasiondiscoveryexecutionpersistenceprivilege_escalation

  • Kaiji

    Kaiji payload

  • Kaiji family

    kaiji

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    executionpersistenceprivilege_escalation

  • Creates/modifies environment variables

    Creating/modifying environment variables is a common persistence mechanism.

    persistenceprivilege_escalationdefense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Modifies init.d

    Adds/modifies system service, likely for persistence.

    persistence

  • Write file to user bin folder

    persistence

  • Modifies Bash startup script

    persistence
  behavioral1