Extracted

• • Target
    jaffacakes118_935643614522a368021c30d60d3ecde2d8c9643a052cc330470c3c32de7b986f.bin
  • Size 61KB
  • SHA256 935643614522a368021c30d60d3ecde2d8c9643a052cc330470c3c32de7b986f
  • MD5 ecbed89eb57406cc7402c255648d8e29
  • SHA1 5db84ed0dee10f40facdb226c4a961804a7c1296
  • SHA512 dcac73687f2c46adba3db72c93a22288feb8ea5a6a44a6be93100ddf735037cb529da0efd9e50450c94e55d26853ad14829c9576791343b28324fab589483c17
  • SSDEEP 1536:oyKMG7nfV6cUQyf7al8HvANlBYfVnCaeFFZS:hKjp9ZyfHyBYftCa06
  • TLSH
    T1E35302E1F045D30171F0BE37728C4545EFC1226CABEF5EF02B489598D6AFE1A567481A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  botnetunstabledefense_evasiondiscoverymirai

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (406706) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1