General
- Target jaffacakes118_a3bc0d017b80b45917c0761d42f53a2717e5aae82071d6f5ddae90e80554858e.bin
- Size 95KB
- Sample260910-kxetdsal4s
- SHA256 a3bc0d017b80b45917c0761d42f53a2717e5aae82071d6f5ddae90e80554858e
- MD5 1f3e1a2d8820e1b341392639a6dcedfa
- SHA1 49633bc230acec29b519d2866a13d10b14dc8fdb
- SHA512 1670af974ed554b01b0b3de92812d4922635683369d7925e6b04bdef099390022ca6e5c0ba76db29a6dc6e22255820fa4d18cf141a4aa83a74c717ef84071104
- SSDEEP 1536:1giUDwFr33AgYLAfXBGBKDcfLOgdsSqrCfeWs7BAtB0TAbVRz0HHJ:1gr0r3w0pG0XwBtKTAL0HH
- TLSH T16193F706BB641FFBD85FCD3746B95B05258C960722A83B3A3974D81CB24B19F0AE3864
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_a3bc0d017b80b45917c0761d42f53a2717e5aae82071d6f5ddae90e80554858e.bin
Resource
debian12-mipsel-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_a3bc0d017b80b45917c0761d42f53a2717e5aae82071d6f5ddae90e80554858e.bin
- Size 95KB
- SHA256 a3bc0d017b80b45917c0761d42f53a2717e5aae82071d6f5ddae90e80554858e
- MD5 1f3e1a2d8820e1b341392639a6dcedfa
- SHA1 49633bc230acec29b519d2866a13d10b14dc8fdb
- SHA512 1670af974ed554b01b0b3de92812d4922635683369d7925e6b04bdef099390022ca6e5c0ba76db29a6dc6e22255820fa4d18cf141a4aa83a74c717ef84071104
- SSDEEP 1536:1giUDwFr33AgYLAfXBGBKDcfLOgdsSqrCfeWs7BAtB0TAbVRz0HHJ:1gr0r3w0pG0XwBtKTAL0HH
- TLSH T16193F706BB641FFBD85FCD3746B95B05258C960722A83B3A3974D81CB24B19F0AE3864
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Contacts a large (7320) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Renames itself
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.