General
- Target jaffacakes118_9cb5d5ead6da31c40a80c5425d9c33da1c719d91ea17db7fa550353af010df08.bin
- Size 155KB
- Sample260924-j57npshe33
- SHA256 9cb5d5ead6da31c40a80c5425d9c33da1c719d91ea17db7fa550353af010df08
- MD5 c398258c99c92c2cee867b406f6fd62d
- SHA1 12b8156a071fb638c6694e0593cff15c3388ed68
- SHA512 d03f0a71e039e8423f0e445a20f9472b64fa018dac492cfc0247c1347e513cc4aa312cc1eec75a4d5f52a7c55adf00e9fcab78d682f668507193c20ee54e94e7
- SSDEEP 3072:frOj2WO/O3YO/iyia+ur2HEoezRQHdvAz3VOFIYM/9vBNTpT4:frOjPxziaXr2HEoQRYADVOFtM/9ZNTpM
- TLSH T19FF33B46AA818B13C4D217B6BADF42553333AB64D3DB730689286FB43F8779E4E23505
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_9cb5d5ead6da31c40a80c5425d9c33da1c719d91ea17db7fa550353af010df08.bin
Resource
debian12-armhf-20260513-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
UNSTABLE
C2
-
zerobot.zc.al
Targets
-
- Target jaffacakes118_9cb5d5ead6da31c40a80c5425d9c33da1c719d91ea17db7fa550353af010df08.bin
- Size 155KB
- SHA256 9cb5d5ead6da31c40a80c5425d9c33da1c719d91ea17db7fa550353af010df08
- MD5 c398258c99c92c2cee867b406f6fd62d
- SHA1 12b8156a071fb638c6694e0593cff15c3388ed68
- SHA512 d03f0a71e039e8423f0e445a20f9472b64fa018dac492cfc0247c1347e513cc4aa312cc1eec75a4d5f52a7c55adf00e9fcab78d682f668507193c20ee54e94e7
- SSDEEP 3072:frOj2WO/O3YO/iyia+ur2HEoezRQHdvAz3VOFIYM/9vBNTpT4:frOjPxziaXr2HEoQRYADVOFtM/9ZNTpM
- TLSH T19FF33B46AA818B13C4D217B6BADF42553333AB64D3DB730689286FB43F8779E4E23505
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Contacts a large (455846) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Deletes itself
-
Enumerates running processes
Discovers information about currently running processes on the system