General

  • Target
    jaffacakes118_5daf88860dea673f80de1ed49a47b69f9d7f771be029954e05fb7fa8ba40c7f1.bin
  • Size 95KB
  • Sample260924-jvsrss1yhz
  • SHA256 5daf88860dea673f80de1ed49a47b69f9d7f771be029954e05fb7fa8ba40c7f1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • mirai

Botnet
  • UNSTABLE

C2
  • gravitynet.ml

  • zerobot.zc.al

Targets

    • Target
      jaffacakes118_5daf88860dea673f80de1ed49a47b69f9d7f771be029954e05fb7fa8ba40c7f1.bin
    • Size 95KB
    • SHA256 5daf88860dea673f80de1ed49a47b69f9d7f771be029954e05fb7fa8ba40c7f1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Contacts a large (494276) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Deletes itself

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v16

Tasks