Extracted

• • Target
    jaffacakes118_23a3ac47dc82a334db4e1e784abce75a3164a4bf582b097bfafbf42cb16196a4.bin
  • Size 104KB
  • SHA256 23a3ac47dc82a334db4e1e784abce75a3164a4bf582b097bfafbf42cb16196a4
  • MD5 59f7887dd16039108d89a0a732b4dff0
  • SHA1 a7eb75d8ca45a74bf17b13ea82d0e80ae4d5b76a
  • SHA512 85c1f9680cc2528d472a19e0bee240425dd88a15f2c180a8edf380aec872ea72cde0c2a15655e076c79315b9143bb965c0df986e6fb9beadaf0c2b383ef7b076
  • SSDEEP 1536:/wIfFjL2nMstJw0rOmg49DsDGjfgJiQzwYblUR38RM2Km:/9djL25MDQfOzDblUR3KF
  • TLSH
    T1A4A31815BF650EB7D8ABCC3749A90705259CD64661B67F7B3834C418FE8B30B4AE38A4
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (36750) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1