General
- Target jaffacakes118_db7b79ae7c3a15522736e95891b569b88424d8fc0ee99de7c39a98e960f286a0.bin
- Size 5.5MB
- Sample260922-mwsd7scd52
- SHA256 db7b79ae7c3a15522736e95891b569b88424d8fc0ee99de7c39a98e960f286a0
- MD5 ad33fce9ab2b82ff2b7a085b59d4a354
- SHA1 024db2b68879ea7cdb4f17d58e4c7f37444f2f78
- SHA512 373e8a3c0d30d871ec973f829787c35b330b54d66777e25a0d0378721458e41da0eda01eb180e84b82fb7de5b2a921420aece9060170a846510b5be42dbbcfcd
- SSDEEP 49152:5A/Rd2Q8eZe1zFpfWC1965nSJQ3JljeVOmk:hzFpu3noAv
- TLSH T1AB46E705BD842BE7C42C5F7495EACD5622B05D140AF14A3A26A4FFE9BCB62747F0389C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_db7b79ae7c3a15522736e95891b569b88424d8fc0ee99de7c39a98e960f286a0.bin
Resource
debian12-mipsel-20260513-en
Malware Config
Targets
-
- Target jaffacakes118_db7b79ae7c3a15522736e95891b569b88424d8fc0ee99de7c39a98e960f286a0.bin
- Size 5.5MB
- SHA256 db7b79ae7c3a15522736e95891b569b88424d8fc0ee99de7c39a98e960f286a0
- MD5 ad33fce9ab2b82ff2b7a085b59d4a354
- SHA1 024db2b68879ea7cdb4f17d58e4c7f37444f2f78
- SHA512 373e8a3c0d30d871ec973f829787c35b330b54d66777e25a0d0378721458e41da0eda01eb180e84b82fb7de5b2a921420aece9060170a846510b5be42dbbcfcd
- SSDEEP 49152:5A/Rd2Q8eZe1zFpfWC1965nSJQ3JljeVOmk:hzFpu3noAv
- TLSH T1AB46E705BD842BE7C42C5F7495EACD5622B05D140AF14A3A26A4FFE9BCB62747F0389C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Boot or Logon Initialization Scripts
1RC Scripts
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
2Boot or Logon Initialization Scripts
1RC Scripts
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1