Resubmissions

21-06-2022 12:24

220621-pla4aaddfl 10

02-05-2022 12:13

220502-pdw1safdcr 10

17-03-2022 08:42

220317-klzdnacef5 10

16-03-2022 23:36

220316-3lmzqshce6 10

16-03-2022 23:32

220316-3jmwysfebr 10

16-03-2022 21:48

220316-1n9keaghf7 10

General

  • Target

    c32505769e0e0f70b29b80344b738db41246a0bfd053641fc14d8825c32032fd

  • Size

    101KB

  • MD5

    506d56b115193fa7d2f28208f9171f84

  • SHA1

    e0e5b260dbb72ce89cb9208ab8602b934507aa52

  • SHA256

    c32505769e0e0f70b29b80344b738db41246a0bfd053641fc14d8825c32032fd

  • SHA512

    034754a5399b01ec82fcd6129fc89f28c57fc6a128432262c85461ed320f5d95a779501c817683f73a063f5dd8672753073bc4a17bdc1fccbf7de105a302f6d7

Malware Config

Signatures

  • Detect Mirai Payload 1 IoCs
  • Detected Gafgyt Variant 1 IoCs
  • Detected x86corona Mirai Variant 1 IoCs

    File resembles variant of the Mirai bot which was first seen in early 2020.

  • Gafgyt family
  • Mirai family
  • Mirai_x86corona family

Files

  • c32505769e0e0f70b29b80344b738db41246a0bfd053641fc14d8825c32032fd
    .elf linux x86