Overview

overview

10

Static

static

10

jaffacakes...be.bin

debian-9-mips

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_17844ca66d5224d4800b3150d91880b693bcf6507805b5c266d2c2c0552e41be.bin
  • Size 273KB
  • Sample261017-rtfd3sfd58
  • SHA256 17844ca66d5224d4800b3150d91880b693bcf6507805b5c266d2c2c0552e41be
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
upxbotnetmozi

Malware Config

Signatures

  • Family: Mozi, Mozi Botnet

    Mozi aka MoziBotnet is a multi-platform linux botnet targeting IoT devices.

    botnetmozi
  • Detects Mozi Payload 1 IoCs
  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

File Explorer

  • jaffacakes118_17844ca66d5224d4800b3150d91880b693bcf6507805b5c266d2c2c0552e41be.bin
    .elf 273KB

jaffacakes118_17844ca66d5224d4800b3150d91880b693bcf6507805b5c266d2c2c0552e41be.bin

  • SHA256 17844ca66d5224d4800b3150d91880b693bcf6507805b5c266d2c2c0552e41be
  • MD5 SHA1 SHA512 SSDEEP TLSH
linuxmipsbe

  • Detects Mozi Payload

  • Patched UPX-packed file

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx