General
- Target jaffacakes118_5daf88860dea673f80de1ed49a47b69f9d7f771be029954e05fb7fa8ba40c7f1.bin
- Size 95KB
- Sample260924-jvsrss1yhz
- SHA256 5daf88860dea673f80de1ed49a47b69f9d7f771be029954e05fb7fa8ba40c7f1
- MD5 c48ef30b281b7546565ab8f9d47fe183
- SHA1 4116e07c8f72b7f463f32677ea599d1b6a71cec7
- SHA512 28dbe936ec49231a331799a58cacf1036ec40fce85e5a4abd4f1c8ce465fc0423521a858a6e9f3b7dd68b371025e18b2b865f12367d8fff3dd846bbf76a079b2
- SSDEEP 1536:Nh0vierOuIiZMgviQ4DRg0hrTHxTIydhHyoGISQuuwSXjy+Y+a:NmvhCuIiZiQ4lg0FRTdhSouQlNN2
- TLSH T12E936CC5AA83D0F9E85605752037AB339737E13E201BDB86D36D9933AC52A50DB4B36C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_5daf88860dea673f80de1ed49a47b69f9d7f771be029954e05fb7fa8ba40c7f1.bin
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
UNSTABLE
C2
-
gravitynet.ml
-
zerobot.zc.al
Targets
-
- Target jaffacakes118_5daf88860dea673f80de1ed49a47b69f9d7f771be029954e05fb7fa8ba40c7f1.bin
- Size 95KB
- SHA256 5daf88860dea673f80de1ed49a47b69f9d7f771be029954e05fb7fa8ba40c7f1
- MD5 c48ef30b281b7546565ab8f9d47fe183
- SHA1 4116e07c8f72b7f463f32677ea599d1b6a71cec7
- SHA512 28dbe936ec49231a331799a58cacf1036ec40fce85e5a4abd4f1c8ce465fc0423521a858a6e9f3b7dd68b371025e18b2b865f12367d8fff3dd846bbf76a079b2
- SSDEEP 1536:Nh0vierOuIiZMgviQ4DRg0hrTHxTIydhHyoGISQuuwSXjy+Y+a:NmvhCuIiZiQ4lg0FRTdhSouQlNN2
- TLSH T12E936CC5AA83D0F9E85605752037AB339737E13E201BDB86D36D9933AC52A50DB4B36C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Contacts a large (494276) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Deletes itself
-
Enumerates running processes
Discovers information about currently running processes on the system