Extracted

• • Target
    jaffacakes118_7b05cab5f164832b6891559390b2ef1d08e22b82ff746de73db341444a712e51.bin
  • Size 39KB
  • SHA256 7b05cab5f164832b6891559390b2ef1d08e22b82ff746de73db341444a712e51
  • MD5 1e6057e3aea04f0459209eebc56c1e83
  • SHA1 e0af1d5491e4b757a042c3ddeda1a930ae827b46
  • SHA512 fe2acbd985b6f7798212dc8b866232fdb49f61ec705b86f5bfc4a95a6de486fdf70d290ce013ffbfc77ec2a15af0975332cb87c08316e6ecd3fe678d3c0551c6
  • SSDEEP 768:Wh7xsk4LFj64hdlm+pTrGCHZQiW84Jx40BkqmCllMJgvDKxSe/uWMi:WriRj6QmmU4vxkM4DKxS0
  • TLSH
    T16F03F1AF3276698CEEEE8E7C51FD47B46841A9C0755ADF8893204C46E213307D1A64FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  botnetunstabledefense_evasiondiscoverymirai

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (447255) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1