General
- Target jaffacakes118_72b97544e40cc19b571fefe0fac377a8941280e4fcff567a5b3949d744b15021.bin
- Size 93KB
- Sample260910-kxehmatwew
- SHA256 72b97544e40cc19b571fefe0fac377a8941280e4fcff567a5b3949d744b15021
- MD5 49cb1eb7ec72350f54bbe2f67c89aab1
- SHA1 3d3248e6717210b31f8bc7e73b471833c4f25bdf
- SHA512 d95f17595d91fc0867a3a563fbe674100b5a73806d688f7c9944a18265dc84a01643484200594b0b570d8f384a2d98edfc12063482ac6783bd82fe3857742c89
- SSDEEP 1536:44AmbS7mRxuGR/iR0FXV2NW2gt4D2H+s1aCbCCiYCCChAWvHyZttpDTAbVRY/:bbmmRx12NW2gt4D2H+sDGHwpDTAM
- TLSH T1D893E91A6F219F7CF76C823547B78E31A74833963BE1D685D25CE9014E6034D682FBA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_72b97544e40cc19b571fefe0fac377a8941280e4fcff567a5b3949d744b15021.bin
Resource
debian9-mipsbe-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_72b97544e40cc19b571fefe0fac377a8941280e4fcff567a5b3949d744b15021.bin
- Size 93KB
- SHA256 72b97544e40cc19b571fefe0fac377a8941280e4fcff567a5b3949d744b15021
- MD5 49cb1eb7ec72350f54bbe2f67c89aab1
- SHA1 3d3248e6717210b31f8bc7e73b471833c4f25bdf
- SHA512 d95f17595d91fc0867a3a563fbe674100b5a73806d688f7c9944a18265dc84a01643484200594b0b570d8f384a2d98edfc12063482ac6783bd82fe3857742c89
- SSDEEP 1536:44AmbS7mRxuGR/iR0FXV2NW2gt4D2H+s1aCbCCiYCCChAWvHyZttpDTAbVRY/:bbmmRx12NW2gt4D2H+sDGHwpDTAM
- TLSH T1D893E91A6F219F7CF76C823547B78E31A74833963BE1D685D25CE9014E6034D682FBA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Contacts a large (13165) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Renames itself
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.