Extracted

• • Target
    jaffacakes118_554288eea2c00605c0de41c218437f7aee1825bbb47c2b99c5ae156ad3f5cab0.bin
  • Size 217KB
  • SHA256 554288eea2c00605c0de41c218437f7aee1825bbb47c2b99c5ae156ad3f5cab0
  • MD5 acf798b51bc90e816f659d2ad33977a0
  • SHA1 7c0ee8437dc5dbadc9e3bd2099a43e7a939b0489
  • SHA512 359a9b5f09d4a959714a66a5847215682b149a2d23d7678544c429ff81eafdc36cbec6830857fdeb20b6e563fa5603f53e8d1a19bd598fdf86d9ffc95dca7b4a
  • SSDEEP 6144:pdhcq++3mYHVaHtRCwnnjuh9wRM2/0p6M/RkIz62:tV+xYHVaHtRCwnnw1pD/SIF
  • TLSH
    T14B243B46AA404F13C0D727BAFA9F42453333A7A4D3E7B30695186FB43B8779A4E53606
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (47377) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1