Analysis
- max time kernel
150s - max time network
149s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
10/09/2026, 14:20
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_3f557090a770cbd647923fac8de575d41a93d5a815ebc85834db3bd27f62f454.bin
Resource
debian12-mipsel-20260513-en
debian-12-mipsel
3 signatures
150 seconds
General
- Target jaffacakes118_3f557090a770cbd647923fac8de575d41a93d5a815ebc85834db3bd27f62f454.bin
- Size 139KB
- Sample260910-rnk3dayvbt
- SHA256 3f557090a770cbd647923fac8de575d41a93d5a815ebc85834db3bd27f62f454
- MD5 0ae2a8b17bb9b0b71e8793ae3b3ee64f
- SHA1 85b4a141b809cb0f286eb16b94ffefad37b35d0a
- SHA512 0b8576b67a65e24a88130e1aee11feab0e9c913f5df6e36f798202cab56e3bc88ab99df0906df765e4b3a2cc49e2fd78ab11a3545e8b6f80a0120fe1fd26db1b
- SSDEEP 1536:1gggqGiOtqQ18secozFXBOd2xeIGmm2eS7pEQZPHLztrFQA4FbTYVId0Z+Ir88nU:11oiOt5ecYXIL3SnuvAZ68nb95
- TLSH T15EE3B6096B711EBBE85BDC3746A91B0424CC525771E83BB93D70E91CF66A24F06E38B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Renames itself 1 IoCs
pid Process 810 jaffacakes118_3f557090a770cbd647923fac8de575d41a93d5a815ebc85834db3bd27f62f454.bin - Unexpected DNS network traffic destination 64 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 1.0.0.1 - Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 810 jaffacakes118_3f557090a770cbd647923fac8de575d41a93d5a815ebc85834db3bd27f62f454.bin