General
- Target jaffacakes118_030b586dafe9abbe878997cf09bf439d7561ce0f644cf8573359ee8739a4dde5.bin
- Size 68KB
- Sample260910-kxhv2stwfv
- SHA256 030b586dafe9abbe878997cf09bf439d7561ce0f644cf8573359ee8739a4dde5
- MD5 078a0fc5068fc99532d556e9c94f5e77
- SHA1 4d9e9da16119016ebf3c279f0ecbdfd9b46db149
- SHA512 3d247e171f8cb581f236d3e7eeef2863254765ec43794c62829149b800416e717fa2b120d0df77115ac358211ca57c128dff19b7b5776b0b4b472bf6ecc788ee
- SSDEEP 1536:NqAWp5RyyjxO/iONtDzjAx8FjAjo8fknQYtxHZQm0bZRR:NqnjRyy14ZtEijAjouIJnAb
- TLSH T11D634DC59643D4F9ED19067410F6F7335A36F4372029FE97E3E5AA32BD12202EA4629C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_030b586dafe9abbe878997cf09bf439d7561ce0f644cf8573359ee8739a4dde5.bin
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_030b586dafe9abbe878997cf09bf439d7561ce0f644cf8573359ee8739a4dde5.bin
- Size 68KB
- SHA256 030b586dafe9abbe878997cf09bf439d7561ce0f644cf8573359ee8739a4dde5
- MD5 078a0fc5068fc99532d556e9c94f5e77
- SHA1 4d9e9da16119016ebf3c279f0ecbdfd9b46db149
- SHA512 3d247e171f8cb581f236d3e7eeef2863254765ec43794c62829149b800416e717fa2b120d0df77115ac358211ca57c128dff19b7b5776b0b4b472bf6ecc788ee
- SSDEEP 1536:NqAWp5RyyjxO/iONtDzjAx8FjAjo8fknQYtxHZQm0bZRR:NqnjRyy14ZtEijAjouIJnAb
- TLSH T11D634DC59643D4F9ED19067410F6F7335A36F4372029FE97E3E5AA32BD12202EA4629C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Contacts a large (11738) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Renames itself
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.