Extracted

• • Target
    jaffacakes118_0512e86ba0e014425fc7d520bda38b60b930c99edda741e92558a54dbe801de9.bin
  • Size 38KB
  • SHA256 0512e86ba0e014425fc7d520bda38b60b930c99edda741e92558a54dbe801de9
  • MD5 f806df437c656fc19b066aa34fed4760
  • SHA1 2ef2dee78b4610a59827d478ce56160b73e57fde
  • SHA512 a586bf47b93e384b25781f07bb9875ee7cbe867bbce46285d7a1731f784badad91fce8d6d0d86bfdd5c6217d785aa569767b13ed246056901f3226a5f806c00a
  • SSDEEP 768:izQRyu5O5lb6pplqIykMKIlMBRwLevYAt9XQE/DQI549kJgGlzDpUYsN:iEvQlb2plqb0xt95/DL50cVqYa
  • TLSH
    T11203F17D5B2148C9D0AE88F1632883F11E72CD05FE07ED89369492F7C286E7CA9462DD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  botnetunstabledefense_evasiondiscoverymirai

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (375569) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1