General
- Target jaffacakes118_91f8d5c2f7a61485cdb5e72740b01274032a49ee358b9794c7fa31aed056c562.bin
- Size 134KB
- Sample260910-re2nrsvbmg
- SHA256 91f8d5c2f7a61485cdb5e72740b01274032a49ee358b9794c7fa31aed056c562
- MD5 438e9fe0f3d7fc7082003e4474a2a20a
- SHA1 7023e316e3d1744de27ef9cd918224a390d9f411
- SHA512 f4ff98c68fcd0dc19f0d13182ce2fe42762892c331629a3fe1eaedf6305b1699131fff66659122788ef72abfef481de996a3e3ff126a70ce7938a64b557c2044
- SSDEEP 3072:3/iwy5c7XgSLdxnAwzFfgmLbVQpJffK73VVnoz5:3//yc7Xg6nrzFfgmLb+pJfy7F
- TLSH T130D3F745AC408B11D9D722BBFE5F528C331253A8E3EEB117DD105B59B3CA62B0E3B946
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_91f8d5c2f7a61485cdb5e72740b01274032a49ee358b9794c7fa31aed056c562.bin
Resource
debian12-armhf-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_91f8d5c2f7a61485cdb5e72740b01274032a49ee358b9794c7fa31aed056c562.bin
- Size 134KB
- SHA256 91f8d5c2f7a61485cdb5e72740b01274032a49ee358b9794c7fa31aed056c562
- MD5 438e9fe0f3d7fc7082003e4474a2a20a
- SHA1 7023e316e3d1744de27ef9cd918224a390d9f411
- SHA512 f4ff98c68fcd0dc19f0d13182ce2fe42762892c331629a3fe1eaedf6305b1699131fff66659122788ef72abfef481de996a3e3ff126a70ce7938a64b557c2044
- SSDEEP 3072:3/iwy5c7XgSLdxnAwzFfgmLbVQpJffK73VVnoz5:3//yc7Xg6nrzFfgmLb+pJfy7F
- TLSH T130D3F745AC408B11D9D722BBFE5F528C331253A8E3EEB117DD105B59B3CA62B0E3B946
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Contacts a large (265735) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Renames itself
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.