Extracted

• • Target
    jaffacakes118_e6e52c8ced91114ef0c9c893e74cb0fa149bcda18fcc860fcd06e4d4bfdbe36d
  • Size 48KB
  • SHA256 e6e52c8ced91114ef0c9c893e74cb0fa149bcda18fcc860fcd06e4d4bfdbe36d
  • MD5 2cc6ed5fbc9fb768c18a25263972237c
  • SHA1 f522fa24b85a4524853daf48b54dd74ba0d08590
  • SHA512 46a7646383b528a9babf81be871375a851e00df57019fc43dfe8911b9e8ffda36c05deb1aa2db78b1796c0e85c36bff461a5e2c579f7a6506afc5c8d1de6dd49
  • SSDEEP 768:Z0joeCD8JZxgmUvyiy0fcw4KDXrvILVUlyy0DUamEe8kCvHp1phutJgGlzDpUYsl:yUeCiqaV0XshHUZuv3uHVqYG
  • TLSH
    T1F423F23C14580DAFEF2459BB63C667E37DED0B8681939407AE40F16299542AA70E7FA0
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  botnetunstabledefense_evasiondiscoverymirai

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (124660) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1