General
- Target jaffacakes118_f7543120285895edc2884361fd31532c62a97b54a35a183bdb3f92dda7a60ced.bin
- Size 85KB
- Sample260909-3s7bystygt
- SHA256 f7543120285895edc2884361fd31532c62a97b54a35a183bdb3f92dda7a60ced
- MD5 da9fc49dd5afa01af9f35c3dce6654d7
- SHA1 1e31e296e7819847880dd35d4973d90584a2f885
- SHA512 2703494f49428b7e62538993e0fff7de9a59268b07dd7dda8ca013f6b536186d047f5bd1f8fb1d7d583513b64929c4c86c2f08178251701a87570ce6fd9cb9b4
- SSDEEP 1536:+/rzkkT1jbgePk2K6bwkZU8P8tGp5CYnUJKStkFL88I:+PPkn6MGpytoI
- TLSH T15783A30ABF614FF7E89EDC3749EA2705348D540A25997B39BA34D918F20F24F19E3861
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
jaffacakes118_f7543120285895edc2884361fd31532c62a97b54a35a183bdb3f92dda7a60ced.bin
Resource
debian12-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
LZRD
C2
-
87.106.143.220
Targets
-
- Target jaffacakes118_f7543120285895edc2884361fd31532c62a97b54a35a183bdb3f92dda7a60ced.bin
- Size 85KB
- SHA256 f7543120285895edc2884361fd31532c62a97b54a35a183bdb3f92dda7a60ced
- MD5 da9fc49dd5afa01af9f35c3dce6654d7
- SHA1 1e31e296e7819847880dd35d4973d90584a2f885
- SHA512 2703494f49428b7e62538993e0fff7de9a59268b07dd7dda8ca013f6b536186d047f5bd1f8fb1d7d583513b64929c4c86c2f08178251701a87570ce6fd9cb9b4
- SSDEEP 1536:+/rzkkT1jbgePk2K6bwkZU8P8tGp5CYnUJKStkFL88I:+PPkn6MGpytoI
- TLSH T15783A30ABF614FF7E89EDC3749EA2705348D540A25997B39BA34D918F20F24F19E3861
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Contacts a large (20117) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.