General
- Target jaffacakes118_0abf843402c38fb8832467105da9b45957ddf47f3373ccb4ccb8db26fff17cef.bin
- Size 95KB
- Sample260924-j59hashe36
- SHA256 0abf843402c38fb8832467105da9b45957ddf47f3373ccb4ccb8db26fff17cef
- MD5 c13366dab75614b90ce7f5b4d7f98182
- SHA1 97207f76ef4aefde789d9366f0729e9f6897d1cf
- SHA512 614157a0d0cb184e39a1395e58edea5b8a16a8ce4fb524590c8476fc0235facce02e793cf61e4541d5010e172aa692dda07b5de76285922c04bc14910336549a
- SSDEEP 1536:0yz/KrGqavNk1sWmPnDnXiuprnTFThi+SXCIssCVOgSej5Y+d:D/gNavNDnDXrxs+SSIsxQdaR
- TLSH T1D5937DC5AB83D0F5E85605752037AB329733F43E101ADB96D35E5D32ADA2A50DB0B3AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_0abf843402c38fb8832467105da9b45957ddf47f3373ccb4ccb8db26fff17cef.bin
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
UNSTABLE
C2
-
zerobot.zc.al
Targets
-
- Target jaffacakes118_0abf843402c38fb8832467105da9b45957ddf47f3373ccb4ccb8db26fff17cef.bin
- Size 95KB
- SHA256 0abf843402c38fb8832467105da9b45957ddf47f3373ccb4ccb8db26fff17cef
- MD5 c13366dab75614b90ce7f5b4d7f98182
- SHA1 97207f76ef4aefde789d9366f0729e9f6897d1cf
- SHA512 614157a0d0cb184e39a1395e58edea5b8a16a8ce4fb524590c8476fc0235facce02e793cf61e4541d5010e172aa692dda07b5de76285922c04bc14910336549a
- SSDEEP 1536:0yz/KrGqavNk1sWmPnDnXiuprnTFThi+SXCIssCVOgSej5Y+d:D/gNavNDnDXrxs+SSIsxQdaR
- TLSH T1D5937DC5AB83D0F5E85605752037AB329733F43E101ADB96D35E5D32ADA2A50DB0B3AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Contacts a large (499104) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Deletes itself
-
Enumerates running processes
Discovers information about currently running processes on the system